58f48179ed72fe25993150b8e76ed5840df24d2d8a2f44d90029f6c660d13c7f

General

Target
58f48179ed72fe25993150b8e76ed5840df24d2d8a2f44d90029f6c660d13c7f
Size 284KB
Sample240402-t4exeafd5v
SHA256 58f48179ed72fe25993150b8e76ed5840df24d2d8a2f44d90029f6c660d13c7f
MD5 d22dd4863869e0398ac4667817757168
SHA1 65a78748b4321cacb529e8750be7b853a33848dc
SHA512 82b22cc22f5ac9b17763fda1a79df4309dcf37d7578c95212655fb427502c03d1630a80105229aca3d4d64407550a7db6dbbcb84f267674f5feadb09ac06743f
SSDEEP 6144:5LQ3SKqUtYuPWmBoZbu/WJwQs00OuqHEsqN+D5wMMKS:FgSKrtNXoZbu/WaTHOTS+9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58f48179ed72fe25993150b8e76ed5840df24d2d8a2f44d90029f6c660d13c7f

File Explorer

58f48179ed72fe25993150b8e76ed5840df24d2d8a2f44d90029f6c660d13c7f

.exe 284KB

58f48179ed72fe25993150b8e76ed5840df24d2d8a2f44d90029f6c660d13c7f

IMPHASH eb67be19b81b44ee5931ef078192d536
SHA256 58f48179ed72fe25993150b8e76ed5840df24d2d8a2f44d90029f6c660d13c7f
MD5 d22dd4863869e0398ac4667817757168
SHA1 65a78748b4321cacb529e8750be7b853a33848dc
SHA512 82b22cc22f5ac9b17763fda1a79df4309dcf37d7578c95212655fb427502c03d1630a80105229aca3d4d64407550a7db6dbbcb84f267674f5feadb09ac06743f
SSDEEP 6144:5LQ3SKqUtYuPWmBoZbu/WJwQs00OuqHEsqN+D5wMMKS:FgSKrtNXoZbu/WaTHOTS+9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW CreateFileA GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA HeapAlloc InterlockedIncrement HeapFree CreateHardLinkA ConnectNamedPipe GetModuleHandleW FindNextVolumeMountPointA ReadConsoleOutputA GetUserDefaultLangID GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW lstrcpynW GetAtomNameW LocalHandle SetConsoleTitleA WritePrivateProfileStringW GetThreadLocale GetProcAddress GetLongPathNameA SetComputerNameA SetCalendarInfoW SetConsoleDisplayMode GlobalFindAtomW GetModuleFileNameA HeapSetInformation VirtualProtect GetCurrentDirectoryA DeleteCriticalSection FindAtomW GetSystemTime SetFileAttributesW CreateFileW EncodePointer DecodePointer ExitProcess GetCommandLineW GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapReAlloc SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers ReadFile CloseHandle

user32

GetMonitorInfoW CopyRect LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

58f48179ed72fe25993150b8e76ed5840df24d2d8a2f44d90029f6c660d13c7f

kernel32

user32

generic