5e8f829f348d20cd8787ff207733651d2fd41c806161b7a38473c1ceab75f695

General

Target
5e8f829f348d20cd8787ff207733651d2fd41c806161b7a38473c1ceab75f695
Size 770KB
Sample240422-wneb2seb94
SHA256 5e8f829f348d20cd8787ff207733651d2fd41c806161b7a38473c1ceab75f695
MD5 69eb160a5fd50c6464096d1a67c3d235
SHA1 74acc835517bf6631b24c44486f80d07b7bf153f
SHA512 e6acd87d6d57a1515ae8eca318241136b847d3ec2e36b2aa36c70ba8ced9d510f8204afdb518b2f1edf92de9a23f56705e2a804a780e0359d1fa716ed2a58019
SSDEEP 12288:7+l0naGYKVor4MXhp0P7sj2U1OFO8gWRuLSJnHHlPF0guh7TZ:7+l0dY54Opv20KOoeAnf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e8f829f348d20cd8787ff207733651d2fd41c806161b7a38473c1ceab75f695

File Explorer

5e8f829f348d20cd8787ff207733651d2fd41c806161b7a38473c1ceab75f695

.exe 770KB

5e8f829f348d20cd8787ff207733651d2fd41c806161b7a38473c1ceab75f695

IMPHASH d10268a82f0ec0b09c4d5e18431c41e9
SHA256 5e8f829f348d20cd8787ff207733651d2fd41c806161b7a38473c1ceab75f695
MD5 69eb160a5fd50c6464096d1a67c3d235
SHA1 74acc835517bf6631b24c44486f80d07b7bf153f
SHA512 e6acd87d6d57a1515ae8eca318241136b847d3ec2e36b2aa36c70ba8ced9d510f8204afdb518b2f1edf92de9a23f56705e2a804a780e0359d1fa716ed2a58019
SSDEEP 12288:7+l0naGYKVor4MXhp0P7sj2U1OFO8gWRuLSJnHHlPF0guh7TZ:7+l0dY54Opv20KOoeAnf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA GetConsoleAliasExesLengthA SetFirmwareEnvironmentVariableA GetComputerNameW UnlockFile GetModuleHandleW GetConsoleAliasesLengthA GetDateFormatA SetCommState GlobalAlloc LoadLibraryW IsValidLocale HeapDestroy FindNextVolumeW IsBadWritePtr GlobalUnfix EnumCalendarInfoA GetProcessHeaps LoadLibraryA SetCalendarInfoW SetConsoleDisplayMode SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW SetFileAttributesW GetVolumeInformationW LocalFileTimeToFileTime GetProcAddress GetFileSize GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

5e8f829f348d20cd8787ff207733651d2fd41c806161b7a38473c1ceab75f695

kernel32

advapi32

generic