954bf47b858fbcbe354fea135f9d104e089edbc3c9c750588fde8a1e55076889

General

Target
954bf47b858fbcbe354fea135f9d104e089edbc3c9c750588fde8a1e55076889
Size 749KB
Sample240427-khf3xaeh86
SHA256 954bf47b858fbcbe354fea135f9d104e089edbc3c9c750588fde8a1e55076889
MD5 2473e4881882b115f4af03a4e06768c5
SHA1 d4624ce03223ec6ec967f691e63d7b3c6cf67db6
SHA512 ce0d1f365e56608f199ac96cae81a6f9f71f189acb257a6a3a07545a1ddc4d84ff0d7ebbb8ced3c7fe52b2e06c30f143d6d093c8a4b2fec34a5533ab86e9e328
SSDEEP 12288:WB9m/19iyezJJLhcD4SzYNkgnmNez53H9dADu819vYdDxvZdrNaMUVn0kF:WHmt96JlhY4Aa53Hy19AdDxTrN5Uz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
954bf47b858fbcbe354fea135f9d104e089edbc3c9c750588fde8a1e55076889

File Explorer

954bf47b858fbcbe354fea135f9d104e089edbc3c9c750588fde8a1e55076889

.exe 749KB

954bf47b858fbcbe354fea135f9d104e089edbc3c9c750588fde8a1e55076889

IMPHASH 48d74d1f20524ed61e336cd3961aebfd
SHA256 954bf47b858fbcbe354fea135f9d104e089edbc3c9c750588fde8a1e55076889
MD5 2473e4881882b115f4af03a4e06768c5
SHA1 d4624ce03223ec6ec967f691e63d7b3c6cf67db6
SHA512 ce0d1f365e56608f199ac96cae81a6f9f71f189acb257a6a3a07545a1ddc4d84ff0d7ebbb8ced3c7fe52b2e06c30f143d6d093c8a4b2fec34a5533ab86e9e328
SSDEEP 12288:WB9m/19iyezJJLhcD4SzYNkgnmNez53H9dADu819vYdDxvZdrNaMUVn0kF:WHmt96JlhY4Aa53Hy19AdDxTrN5Uz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFirmwareEnvironmentVariableA GetModuleHandleW GetProcessHeap ReadConsoleW GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW SetConsoleTitleA GetLocaleInfoA GetProcAddress SetStdHandle SetFileAttributesA LoadLibraryA SetConsoleCtrlHandler SetConsoleDisplayMode FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA ScrollConsoleScreenBufferA FindAtomW SetCurrentDirectoryA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

954bf47b858fbcbe354fea135f9d104e089edbc3c9c750588fde8a1e55076889

kernel32

advapi32

generic