91f2dfdf9d688737d07ae80174d5e6a30f6147ce39ebe437ac89460ebdd8d114

General

Target
91f2dfdf9d688737d07ae80174d5e6a30f6147ce39ebe437ac89460ebdd8d114
Size 434KB
Sample240505-2phzhsbd28
SHA256 91f2dfdf9d688737d07ae80174d5e6a30f6147ce39ebe437ac89460ebdd8d114
MD5 149677290aa8404040c2f2ec8c285e21
SHA1 87e8011dc4e5650043062ef9f53de7a4a0531f1d
SHA512 d14a49d2698786fe8b7361c349937f319b613b8be8c579ce641fe2786031ec789cdd6c8b9f00d1cd0729662fab30aedba5885f262dae93dbfaeb0dc11bbce12a
SSDEEP 6144:YjCWCQdVWjXWRSltCvyKN51/jFU+piWhXCS4W6N2sPyOG+V81t6xjl:u5/WMPZ1/jFU+pi8XD6NUD8xjl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91f2dfdf9d688737d07ae80174d5e6a30f6147ce39ebe437ac89460ebdd8d114

File Explorer

91f2dfdf9d688737d07ae80174d5e6a30f6147ce39ebe437ac89460ebdd8d114

.exe 434KB

91f2dfdf9d688737d07ae80174d5e6a30f6147ce39ebe437ac89460ebdd8d114

IMPHASH be37cfa8808e82b62b6ce7f603a1d7f3
SHA256 91f2dfdf9d688737d07ae80174d5e6a30f6147ce39ebe437ac89460ebdd8d114
MD5 149677290aa8404040c2f2ec8c285e21
SHA1 87e8011dc4e5650043062ef9f53de7a4a0531f1d
SHA512 d14a49d2698786fe8b7361c349937f319b613b8be8c579ce641fe2786031ec789cdd6c8b9f00d1cd0729662fab30aedba5885f262dae93dbfaeb0dc11bbce12a
SSDEEP 6144:YjCWCQdVWjXWRSltCvyKN51/jFU+piWhXCS4W6N2sPyOG+V81t6xjl:u5/WMPZ1/jFU+pi8XD6NUD8xjl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW GetModuleFileNameW SetConsoleTitleA SetCurrentDirectoryA FindFirstFileExA EnumCalendarInfoW SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetConsoleCtrlHandler HeapWalk FindAtomA WaitForMultipleObjects EnumDateFormatsW GetSystemTime GetCurrentDirectoryW GetLocaleInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

91f2dfdf9d688737d07ae80174d5e6a30f6147ce39ebe437ac89460ebdd8d114

kernel32

advapi32

generic