2809ff11620a7793560052c4a9c7f2b520b608f3d32c7722133cbeb60e5e9d70

General

Target
2809ff11620a7793560052c4a9c7f2b520b608f3d32c7722133cbeb60e5e9d70
Size 421KB
Sample240417-e54jtsdh24
SHA256 2809ff11620a7793560052c4a9c7f2b520b608f3d32c7722133cbeb60e5e9d70
MD5 11dcd8e017b0e067e922cfb6507a8dde
SHA1 80c4e499c9666401a0f9099482c7fa9debe006d5
SHA512 52b3b17b4d589f9c8fa8dd6b97607b09b84f61cfc7031ac7b9c6f8e348a20f35785e602020e2c0808374f194226eb7bc41cc9d26e7ba37ca9454f54ed2d443f0
SSDEEP 6144:CD9LLLaXO4MxL2D1i3VZUk2IzXd4wFNOC0JaNv8S3+FMgSx3U:CDRnsMSB+3U3IztPjzkS3Bpx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2809ff11620a7793560052c4a9c7f2b520b608f3d32c7722133cbeb60e5e9d70

File Explorer

2809ff11620a7793560052c4a9c7f2b520b608f3d32c7722133cbeb60e5e9d70

.exe 421KB

2809ff11620a7793560052c4a9c7f2b520b608f3d32c7722133cbeb60e5e9d70

IMPHASH 9d610f0fc62075f620c7e94e08d0d24d
SHA256 2809ff11620a7793560052c4a9c7f2b520b608f3d32c7722133cbeb60e5e9d70
MD5 11dcd8e017b0e067e922cfb6507a8dde
SHA1 80c4e499c9666401a0f9099482c7fa9debe006d5
SHA512 52b3b17b4d589f9c8fa8dd6b97607b09b84f61cfc7031ac7b9c6f8e348a20f35785e602020e2c0808374f194226eb7bc41cc9d26e7ba37ca9454f54ed2d443f0
SSDEEP 6144:CD9LLLaXO4MxL2D1i3VZUk2IzXd4wFNOC0JaNv8S3+FMgSx3U:CDRnsMSB+3U3IztPjzkS3Bpx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6177

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW SetDefaultCommConfigA FindVolumeClose GetLocaleInfoA EnumCalendarInfoW SetFirmwareEnvironmentVariableA GetComputerNameW LockFile GetModuleHandleW IsBadReadPtr GetConsoleAliasesLengthA EnumTimeFormatsA SetCommTimeouts GlobalAlloc LoadLibraryW GetAtomNameW SetConsoleTitleA GetProcAddress GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode BuildCommDCBW LoadLibraryA SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA FreeEnvironmentStringsW VirtualProtect GetCurrentDirectoryA SetCalendarInfoA FindAtomW LocalFileTimeToFileTime GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

2809ff11620a7793560052c4a9c7f2b520b608f3d32c7722133cbeb60e5e9d70

kernel32

generic