4248c033673c4358a58f878eed34c3a6d1211c8efbade2b6e6e718a2f6a14bbe

General

Target
4248c033673c4358a58f878eed34c3a6d1211c8efbade2b6e6e718a2f6a14bbe
Size 419KB
Sample240505-he326adc59
SHA256 4248c033673c4358a58f878eed34c3a6d1211c8efbade2b6e6e718a2f6a14bbe
MD5 6fb4ffa5f5f3b17f06d3ff856170cec6
SHA1 12565f5dfc8f387e7844ea7b4f1cb054a1db9ac9
SHA512 6280be9c2782e20fc6b47575e909af96ae36918d66ccb85a344ae5909b655fae08d5643e5ccfeef2f0726d63ddd406d1c703b9016072f30a63d42e691ead756f
SSDEEP 6144:zL80j2r/8VkaDEjaX1f+x9zfSvTz9HHuI6F:zL80arWk6XOD89niF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4248c033673c4358a58f878eed34c3a6d1211c8efbade2b6e6e718a2f6a14bbe

File Explorer

4248c033673c4358a58f878eed34c3a6d1211c8efbade2b6e6e718a2f6a14bbe

.exe 419KB

4248c033673c4358a58f878eed34c3a6d1211c8efbade2b6e6e718a2f6a14bbe

IMPHASH 40ce6fbcf20eabd423c57b484adbe4f8
SHA256 4248c033673c4358a58f878eed34c3a6d1211c8efbade2b6e6e718a2f6a14bbe
MD5 6fb4ffa5f5f3b17f06d3ff856170cec6
SHA1 12565f5dfc8f387e7844ea7b4f1cb054a1db9ac9
SHA512 6280be9c2782e20fc6b47575e909af96ae36918d66ccb85a344ae5909b655fae08d5643e5ccfeef2f0726d63ddd406d1c703b9016072f30a63d42e691ead756f
SSDEEP 6144:zL80j2r/8VkaDEjaX1f+x9zfSvTz9HHuI6F:zL80arWk6XOD89niF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA GetCurrentDirectoryA GetSystemTime GetVolumeInformationW SetConsoleTitleA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

4248c033673c4358a58f878eed34c3a6d1211c8efbade2b6e6e718a2f6a14bbe

kernel32

advapi32

generic