e95d25e0394d667a93546727ab5a53176d45d5e73b70fc9f2d92ed42f2d12c59

General

Target
e95d25e0394d667a93546727ab5a53176d45d5e73b70fc9f2d92ed42f2d12c59
Size 305KB
Sample240502-ag1e2sdc87
SHA256 e95d25e0394d667a93546727ab5a53176d45d5e73b70fc9f2d92ed42f2d12c59
MD5 d8e09d3f217b9d8773e5399a6e5a2ec1
SHA1 b34eaf6c2bcb119982e0057c405d996775746fe1
SHA512 12043a43bef8af3e8a949f792a252954055f7d95500baafe317b139981df2278e47cd27e5b2aff23e23963f4d83c3be0b2f7ba37956eee7f7b6e197c2db787c1
SSDEEP 3072:MvkPnACXmOpxd2jKZT/+pH6kVnoD9oiROvG430xSvO65KzBPjfGUr2sykQJGESXa:RAj0ROnaoW4+3BPZrjQJGfX3K
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e95d25e0394d667a93546727ab5a53176d45d5e73b70fc9f2d92ed42f2d12c59

File Explorer

e95d25e0394d667a93546727ab5a53176d45d5e73b70fc9f2d92ed42f2d12c59

.exe 305KB

e95d25e0394d667a93546727ab5a53176d45d5e73b70fc9f2d92ed42f2d12c59

IMPHASH edb3c0a48d18802f263453ac21caaefd
SHA256 e95d25e0394d667a93546727ab5a53176d45d5e73b70fc9f2d92ed42f2d12c59
MD5 d8e09d3f217b9d8773e5399a6e5a2ec1
SHA1 b34eaf6c2bcb119982e0057c405d996775746fe1
SHA512 12043a43bef8af3e8a949f792a252954055f7d95500baafe317b139981df2278e47cd27e5b2aff23e23963f4d83c3be0b2f7ba37956eee7f7b6e197c2db787c1
SSDEEP 3072:MvkPnACXmOpxd2jKZT/+pH6kVnoD9oiROvG430xSvO65KzBPjfGUr2sykQJGESXa:RAj0ROnaoW4+3BPZrjQJGfX3K
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16615

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mec87\ragutabebadej_naloh.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA LoadLibraryA SetCalendarInfoW CreateHardLinkW GetExitCodeThread CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW GetOEMCP BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA HeapAlloc EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW SetStdHandle SetFilePointerEx HeapReAlloc LCMapStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

e95d25e0394d667a93546727ab5a53176d45d5e73b70fc9f2d92ed42f2d12c59

kernel32

generic