01d44b5ab7ad32ad217704f48eaef140cb380ef532838709ba25c0402e49787e

General

Target
01d44b5ab7ad32ad217704f48eaef140cb380ef532838709ba25c0402e49787e
Size 505KB
Sample240407-2pdpssgh96
SHA256 01d44b5ab7ad32ad217704f48eaef140cb380ef532838709ba25c0402e49787e
MD5 dcb276292deb2ebd5cf39700b09aee34
SHA1 40d91f54a99d34d995484e0f12cf924e1bb7d016
SHA512 879207994a81674c92ece79fd935b912801e3fdd76884e0cacc2f3ab41baa2117fc07c348e75aad4b5b0f1af3f01ee83ce09b44ca62a101a569676bac93e4ef0
SSDEEP 6144:jre8uT58rY642SGXvDAgRGe9xEbdHAXnzAMubnYlxhNWG/wRiTIeVf+Utz/:jqx58rYSdke+mnz5sCNT/vXVfnh/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01d44b5ab7ad32ad217704f48eaef140cb380ef532838709ba25c0402e49787e

File Explorer

01d44b5ab7ad32ad217704f48eaef140cb380ef532838709ba25c0402e49787e

.exe 505KB

01d44b5ab7ad32ad217704f48eaef140cb380ef532838709ba25c0402e49787e

IMPHASH 9b59fefe51f9320ef06302fa1d57096f
SHA256 01d44b5ab7ad32ad217704f48eaef140cb380ef532838709ba25c0402e49787e
MD5 dcb276292deb2ebd5cf39700b09aee34
SHA1 40d91f54a99d34d995484e0f12cf924e1bb7d016
SHA512 879207994a81674c92ece79fd935b912801e3fdd76884e0cacc2f3ab41baa2117fc07c348e75aad4b5b0f1af3f01ee83ce09b44ca62a101a569676bac93e4ef0
SSDEEP 6144:jre8uT58rY642SGXvDAgRGe9xEbdHAXnzAMubnYlxhNWG/wRiTIeVf+Utz/:jqx58rYSdke+mnz5sCNT/vXVfnh/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA IsBadHugeReadPtr GetCommState SetDefaultCommConfigW HeapFree GetComputerNameW LockFile ConnectNamedPipe GetModuleHandleW GetDateFormatA GetConsoleCP GlobalAlloc VirtualFreeEx LoadLibraryW GetConsoleAliasExesLengthW GetConsoleAliasesLengthW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetProcAddress FindVolumeMountPointClose LoadLibraryA HeapWalk GetModuleFileNameA FindFirstVolumeMountPointA FreeEnvironmentStringsW DeleteCriticalSection SetCalendarInfoA CloseHandle CreateFileW EnumCalendarInfoA GetAtomNameW HeapReAlloc HeapAlloc ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetLastError IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind HeapSize SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW FlushFileBuffers

user32

LoadIconA

advapi32

RegCreateKeyA ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

01d44b5ab7ad32ad217704f48eaef140cb380ef532838709ba25c0402e49787e

kernel32

user32

advapi32

generic