ad75a5e08b52342c80ad44cc715d086365053b53cb58b571db9f80fafb92c01b

General

Target
ad75a5e08b52342c80ad44cc715d086365053b53cb58b571db9f80fafb92c01b
Size 418KB
Sample240427-e5fg1abh2y
SHA256 ad75a5e08b52342c80ad44cc715d086365053b53cb58b571db9f80fafb92c01b
MD5 2cd9e853d0b4397d29cc9e0d5810c73d
SHA1 13d4b8430d8c296334b8489ffbad21e88dadc0df
SHA512 1d4aac3344f9dc5d0a157441499c1204b5ca65f3f640a18b820933dfad219c1f44c30e2158cc57fd3bc343c7cb9dc16de78aa8963454fe98a23350c2db1bd0ac
SSDEEP 6144:77moGeb6RptVKAv+9sWfx/eLmt6SAQeVTEu680BXs+tTbA:77+ebCV9LWfx/zUSKVQushT8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad75a5e08b52342c80ad44cc715d086365053b53cb58b571db9f80fafb92c01b

File Explorer

ad75a5e08b52342c80ad44cc715d086365053b53cb58b571db9f80fafb92c01b

.exe 418KB

ad75a5e08b52342c80ad44cc715d086365053b53cb58b571db9f80fafb92c01b

IMPHASH 18574afffce1b4513ce1d67cf39f11a2
SHA256 ad75a5e08b52342c80ad44cc715d086365053b53cb58b571db9f80fafb92c01b
MD5 2cd9e853d0b4397d29cc9e0d5810c73d
SHA1 13d4b8430d8c296334b8489ffbad21e88dadc0df
SHA512 1d4aac3344f9dc5d0a157441499c1204b5ca65f3f640a18b820933dfad219c1f44c30e2158cc57fd3bc343c7cb9dc16de78aa8963454fe98a23350c2db1bd0ac
SSDEEP 6144:77moGeb6RptVKAv+9sWfx/eLmt6SAQeVTEu680BXs+tTbA:77+ebCV9LWfx/zUSKVQushT8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFirmwareEnvironmentVariableA GetModuleHandleW GetProcessHeap GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW SetConsoleTitleA GlobalUnfix SetCurrentDirectoryA GetLocaleInfoA SetStdHandle SetFileAttributesA LoadLibraryA SetConsoleDisplayMode FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA ScrollConsoleScreenBufferA FindAtomW FileTimeToLocalFileTime GetProcAddress EnumCalendarInfoA CloseHandle GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA

user32

GetProcessDefaultLayout

advapi32

ReadEventLogW

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

ad75a5e08b52342c80ad44cc715d086365053b53cb58b571db9f80fafb92c01b

kernel32

user32

advapi32

ole32

generic