71f134655c1be04282acfbf0944314f016c26a50f34dbaea9122013d2cc1d351

General

Target
71f134655c1be04282acfbf0944314f016c26a50f34dbaea9122013d2cc1d351
Size 411KB
Sample240425-lsf2bshe7z
SHA256 71f134655c1be04282acfbf0944314f016c26a50f34dbaea9122013d2cc1d351
MD5 303c5121cbdf0b7db668ee2cfed6b8e9
SHA1 c366f445632a5076ba253aadbc8ab3af40da28c7
SHA512 a53dd46ae38e4b06a6921df8637f5a146ef3c9ef77fb315f0fba666319056c7ee3f9cb22964abe2581a6defd9066f67080aabf61fd9fb88561ece04ed279cacf
SSDEEP 6144:I+x1ShTyz9EqOq21LVVb7ZpK2FoICp+fGqhDbSe8Lbp779ZLzW6f:9xo2X2xV1ZpKJICpZqR2bdhc6f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71f134655c1be04282acfbf0944314f016c26a50f34dbaea9122013d2cc1d351

File Explorer

71f134655c1be04282acfbf0944314f016c26a50f34dbaea9122013d2cc1d351

.exe 411KB

71f134655c1be04282acfbf0944314f016c26a50f34dbaea9122013d2cc1d351

IMPHASH 5e92d30764e747854cc6239c62c56f52
SHA256 71f134655c1be04282acfbf0944314f016c26a50f34dbaea9122013d2cc1d351
MD5 303c5121cbdf0b7db668ee2cfed6b8e9
SHA1 c366f445632a5076ba253aadbc8ab3af40da28c7
SHA512 a53dd46ae38e4b06a6921df8637f5a146ef3c9ef77fb315f0fba666319056c7ee3f9cb22964abe2581a6defd9066f67080aabf61fd9fb88561ece04ed279cacf
SSDEEP 6144:I+x1ShTyz9EqOq21LVVb7ZpK2FoICp+fGqhDbSe8Lbp779ZLzW6f:9xo2X2xV1ZpKJICpZqR2bdhc6f
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5708

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA GetCommState GetModuleHandleW GetProcessHeap GetDateFormatA GlobalAlloc LoadLibraryW HeapDestroy IsBadWritePtr GetModuleFileNameW GlobalUnfix GetProcAddress SetFirmwareEnvironmentVariableW LoadLibraryA GetLocaleInfoA SetConsoleDisplayMode SetCurrentDirectoryW WaitForMultipleObjects SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW GetVolumeInformationW GetFileType EnumCalendarInfoA CloseHandle GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA

user32

GetProcessDefaultLayout

advapi32

ReadEventLogA

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

71f134655c1be04282acfbf0944314f016c26a50f34dbaea9122013d2cc1d351

kernel32

user32

advapi32

ole32

generic