1a078c4545a861c6f42aa9920d0265ca0d63dd000a6f4251c30419604b7e867d

General

Target
1a078c4545a861c6f42aa9920d0265ca0d63dd000a6f4251c30419604b7e867d
Size 1.9MB
Sample240505-2a6f9sff8t
SHA256 1a078c4545a861c6f42aa9920d0265ca0d63dd000a6f4251c30419604b7e867d
MD5 541f79ee2c7c41e06f7b72a487f15ecc
SHA1 c56b4e10d9f2e8594b3ef5dabbdf657258cdaee2
SHA512 d773db82942dc6e0e7051a4b1c4724fc958ef671f5001927c5066dd19e50d5a55976e919ab91879a8f64ccf7d69ec789e75d64a87a7ee819b1a8c4d2099a3775
SSDEEP 3072:sOnyTGV1tijmRBE9ZOrBdcp6zXybbEcmbnIqHt1UX9I3S+vGIVXKxV+y09uSNTus:sOyK3ESrddcTbFmdpSgzNK+FcS3VT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a078c4545a861c6f42aa9920d0265ca0d63dd000a6f4251c30419604b7e867d

File Explorer

1a078c4545a861c6f42aa9920d0265ca0d63dd000a6f4251c30419604b7e867d

.exe 1.9MB

1a078c4545a861c6f42aa9920d0265ca0d63dd000a6f4251c30419604b7e867d

IMPHASH b435c235420dc9fc090ba038dbbad3b1
SHA256 1a078c4545a861c6f42aa9920d0265ca0d63dd000a6f4251c30419604b7e867d
MD5 541f79ee2c7c41e06f7b72a487f15ecc
SHA1 c56b4e10d9f2e8594b3ef5dabbdf657258cdaee2
SHA512 d773db82942dc6e0e7051a4b1c4724fc958ef671f5001927c5066dd19e50d5a55976e919ab91879a8f64ccf7d69ec789e75d64a87a7ee819b1a8c4d2099a3775
SSDEEP 3072:sOnyTGV1tijmRBE9ZOrBdcp6zXybbEcmbnIqHt1UX9I3S+vGIVXKxV+y09uSNTus:sOyK3ESrddcTbFmdpSgzNK+FcS3VT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1858242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc FindClose WaitForSingleObject GetModuleHandleA LoadLibraryA LoadLibraryW CreateThread WriteConsoleW VirtualProtect GetModuleHandleW FreeLibrary GetComputerNameA CloseHandle HeapSize SetFilePointerEx GetFileSizeEx GetProcAddress FindFirstFileW RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte GetStringTypeW GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW HeapAlloc HeapFree LCMapStringW GetFileType HeapReAlloc FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode CreateFileW

user32

GetDesktopWindow ReleaseDC CreateWindowExW DefWindowProcW

advapi32

GetUserNameA

Sharing

General

Malware Config

Signatures

File Explorer

1a078c4545a861c6f42aa9920d0265ca0d63dd000a6f4251c30419604b7e867d

kernel32

user32

advapi32

generic