5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

General

Target
5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362
Size 190KB
Sample240404-2hheeaca8v
SHA256 5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362
MD5 204e7ef6d2e34f1cb4951f80a98b7016
SHA1 9d3921efcd09ea06b1e02badd5248bccb829eb4e
SHA512 32fbf81d4f951f4242326ae77d3d64226d3b43b04a12d7322378be054ba82a30ff1f379370c1d552bc89faa216ba9e4979037bdf4b20c79b7014108b94d5f534
SSDEEP 3072:8zUhffq/KrDI/Y9KSBvYNnS1Zt0PW/fyelUpnQPqpah:8y3q/KfI/YBoGCWfyeupQPqpa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

File Explorer

5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

.exe 190KB

5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

IMPHASH 84fe06240982f1bd102fcac07fa31539
SHA256 5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362
MD5 204e7ef6d2e34f1cb4951f80a98b7016
SHA1 9d3921efcd09ea06b1e02badd5248bccb829eb4e
SHA512 32fbf81d4f951f4242326ae77d3d64226d3b43b04a12d7322378be054ba82a30ff1f379370c1d552bc89faa216ba9e4979037bdf4b20c79b7014108b94d5f534
SSDEEP 3072:8zUhffq/KrDI/Y9KSBvYNnS1Zt0PW/fyelUpnQPqpah:8y3q/KfI/YBoGCWfyeupQPqpa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10305

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW CreateFileA GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA HeapAlloc InterlockedIncrement HeapFree CreateHardLinkA ConnectNamedPipe GetModuleHandleW FindNextVolumeMountPointA ReadConsoleOutputA GetUserDefaultLangID GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW lstrcpynW GetAtomNameW LocalHandle SetConsoleTitleA WritePrivateProfileStringW GetThreadLocale GetProcAddress GetLongPathNameA SetComputerNameA LoadLibraryA SetCalendarInfoW SetConsoleOutputCP GlobalFindAtomW GetModuleFileNameA HeapSetInformation VirtualProtect GetCurrentDirectoryA DeleteCriticalSection FindAtomW GetSystemTime SetFileAttributesW CreateFileW EncodePointer DecodePointer GetCommandLineW GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapReAlloc SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers ReadFile CloseHandle

user32

GetMonitorInfoW CopyRect LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

kernel32

user32

generic