fef491847fea476ce4910e8329222c0c93ec47d5f6a70a49e7f789f17357e0cc

General

Target
fef491847fea476ce4910e8329222c0c93ec47d5f6a70a49e7f789f17357e0cc
Size 719KB
Sample240402-rd5zssce41
SHA256 fef491847fea476ce4910e8329222c0c93ec47d5f6a70a49e7f789f17357e0cc
MD5 2586b7ef106deb2efb860a230f639dc1
SHA1 fb9bba0d2ed657645e1b6a286c0f066d272fdab6
SHA512 4f475ddc773314430c61536c71e1dcd30759aedbdb8aaa057259cf8e158b8786606a178047671cdee81d4e345aca93aaf45ff2f56007b46e564170f574452f58
SSDEEP 12288:K9i0rSnYWlRKVAe9km7LVk0nXxdx0cMOGzeb1+C7uKEB6TI53o8Xx7OheIbf:eigWRMAM7Lue9QOYebZyx4Eo8hahr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef491847fea476ce4910e8329222c0c93ec47d5f6a70a49e7f789f17357e0cc

File Explorer

fef491847fea476ce4910e8329222c0c93ec47d5f6a70a49e7f789f17357e0cc

.exe 719KB

fef491847fea476ce4910e8329222c0c93ec47d5f6a70a49e7f789f17357e0cc

IMPHASH bea1d1150f59547a36828206b658e6da
SHA256 fef491847fea476ce4910e8329222c0c93ec47d5f6a70a49e7f789f17357e0cc
MD5 2586b7ef106deb2efb860a230f639dc1
SHA1 fb9bba0d2ed657645e1b6a286c0f066d272fdab6
SHA512 4f475ddc773314430c61536c71e1dcd30759aedbdb8aaa057259cf8e158b8786606a178047671cdee81d4e345aca93aaf45ff2f56007b46e564170f574452f58
SSDEEP 12288:K9i0rSnYWlRKVAe9km7LVk0nXxdx0cMOGzeb1+C7uKEB6TI53o8Xx7OheIbf:eigWRMAM7Lue9QOYebZyx4Eo8hahr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW CreateFileA GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA HeapAlloc InterlockedIncrement HeapFree CreateHardLinkA ConnectNamedPipe GetModuleHandleW FindNextVolumeMountPointA ReadConsoleOutputA GetUserDefaultLangID GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW lstrcpynW GetAtomNameW LocalHandle SetConsoleTitleA WritePrivateProfileStringW GetThreadLocale GetProcAddress GetLongPathNameA SetComputerNameA SetCalendarInfoW SetConsoleDisplayMode GlobalFindAtomW WaitForMultipleObjects GetModuleFileNameA HeapSetInformation VirtualProtect GetCurrentDirectoryA DeleteCriticalSection FindAtomW GetSystemTime SetFileAttributesW CreateFileW EncodePointer DecodePointer ExitProcess GetCommandLineW GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapReAlloc SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers ReadFile CloseHandle

user32

GetMonitorInfoW CopyRect LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

fef491847fea476ce4910e8329222c0c93ec47d5f6a70a49e7f789f17357e0cc

kernel32

user32

generic