e197565fc2a70fac1551429794107952

General

Target
e197565fc2a70fac1551429794107952
Size 938KB
Sample240327-nxsl2aee2s
SHA256 ea90d7eb7c94bcc2ded7b76a451fa70df84e678ec7a44e00b4153a3a1ff842c6
MD5 e197565fc2a70fac1551429794107952
SHA1 85c928cc0c75a7d7441ae2526d61a7137cacdb19
SHA512 a0ad8c0e98c6bb77a7e95aa9cc2287a70d06dc8ac332f91e145e88904a6d9710dab1a27fd36494afd0916d16373f37757ba479467effac8a70b5a862c5120b3a
SSDEEP 24576:VAaUTamPhbHqQbdwzcpJo4+7zy2pzOZQCsDUn:VArTbPhDRbHpJo4+1MdOW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e197565fc2a70fac1551429794107952

File Explorer

e197565fc2a70fac1551429794107952

.exe 938KB

e197565fc2a70fac1551429794107952

IMPHASH 7fad4a54d93bed9694c0c2f23242d80b
SHA256 ea90d7eb7c94bcc2ded7b76a451fa70df84e678ec7a44e00b4153a3a1ff842c6
MD5 e197565fc2a70fac1551429794107952
SHA1 85c928cc0c75a7d7441ae2526d61a7137cacdb19
SHA512 a0ad8c0e98c6bb77a7e95aa9cc2287a70d06dc8ac332f91e145e88904a6d9710dab1a27fd36494afd0916d16373f37757ba479467effac8a70b5a862c5120b3a
SSDEEP 24576:VAaUTamPhbHqQbdwzcpJo4+7zy2pzOZQCsDUn:VArTbPhDRbHpJo4+1MdOW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW SizeofResource GetModuleFileNameW CreateFileW GetProcAddress LockResource CloseHandle GetWindowsDirectoryW DeleteFileW LocalFree lstrcpyW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc RaiseException Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetSystemDirectoryW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleHandleW CreateDirectoryW LoadResource FreeLibrary InterlockedDecrement FindResourceW

user32

SendMessageW FindWindowW

shlwapi

StrCpyW PathFileExistsW PathRemoveFileSpecW PathAppendW

advapi32

AllocateAndInitializeSid SetSecurityInfo SetEntriesInAclW FreeSid GetSecurityInfo

Sharing

General

Malware Config

Signatures

File Explorer

e197565fc2a70fac1551429794107952

kernel32

user32

shlwapi

advapi32

generic