fe8a4f533f7073756e9f7abca0b84630c60e402751b96c125b17ad22e6125d6c

General

Target
fe8a4f533f7073756e9f7abca0b84630c60e402751b96c125b17ad22e6125d6c
Size 312KB
Sample240407-z35pbsfa47
SHA256 fe8a4f533f7073756e9f7abca0b84630c60e402751b96c125b17ad22e6125d6c
MD5 8312651e6bac9b7a04db6df564958251
SHA1 54f36efb941322a3ce6aa5079b89b42e29308cad
SHA512 26fa087e27120abc2f3c2a1747b677a1a022d39f45fe3f29a28e3d4ed254cfa61c747fc4a4fd64ef8bc52a9f391f0c49bf5657526ce676048f7fbcacf922ea81
SSDEEP 3072:VCpBPXpoH0lWUKbwsXwNnW8aMoe4Mz+ylek4SM4Aip67za2oO:MpBPXpoH04Uyw7NnZoe4MTwPC6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe8a4f533f7073756e9f7abca0b84630c60e402751b96c125b17ad22e6125d6c

File Explorer

fe8a4f533f7073756e9f7abca0b84630c60e402751b96c125b17ad22e6125d6c

.exe 312KB

fe8a4f533f7073756e9f7abca0b84630c60e402751b96c125b17ad22e6125d6c

IMPHASH 32db0a910f88bc9b49b86745793d5182
SHA256 fe8a4f533f7073756e9f7abca0b84630c60e402751b96c125b17ad22e6125d6c
MD5 8312651e6bac9b7a04db6df564958251
SHA1 54f36efb941322a3ce6aa5079b89b42e29308cad
SHA512 26fa087e27120abc2f3c2a1747b677a1a022d39f45fe3f29a28e3d4ed254cfa61c747fc4a4fd64ef8bc52a9f391f0c49bf5657526ce676048f7fbcacf922ea81
SSDEEP 3072:VCpBPXpoH0lWUKbwsXwNnW8aMoe4Mz+ylek4SM4Aip67za2oO:MpBPXpoH04Uyw7NnZoe4MTwPC6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadHugeReadPtr GetCommState HeapFree GetComputerNameW LockFile ConnectNamedPipe GetModuleHandleW GetConsoleAliasesLengthA GetDateFormatA GetCurrencyFormatW GetConsoleCP GlobalAlloc VirtualFreeEx LoadLibraryW GetConsoleAliasExesLengthW GetLocaleInfoA GetAtomNameW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetProcAddress FindVolumeMountPointClose LoadLibraryA FindFirstVolumeMountPointW HeapLock GetModuleFileNameA FreeEnvironmentStringsW DeleteCriticalSection SetCalendarInfoA SetStdHandle SetFilePointer SetDefaultCommConfigA GetVersionExW HeapReAlloc HeapAlloc ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection GetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize IsProcessorFeaturePresent GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile CloseHandle WriteConsoleW CreateFileW

user32

LoadIconA

advapi32

OpenThreadToken RegCreateKeyA

Sharing

General

Malware Config

Signatures

File Explorer

fe8a4f533f7073756e9f7abca0b84630c60e402751b96c125b17ad22e6125d6c

kernel32

user32

advapi32

generic