aa9aeb5dc18f2ccbc53d908739b7fc5ed24ab56350c1caed9542adac9eb3aee9

General

Target
aa9aeb5dc18f2ccbc53d908739b7fc5ed24ab56350c1caed9542adac9eb3aee9
Size 419KB
Sample240505-hktexadd98
SHA256 aa9aeb5dc18f2ccbc53d908739b7fc5ed24ab56350c1caed9542adac9eb3aee9
MD5 f224e965364493adc16243a8364c4459
SHA1 37cefe4b5169c382e1822f0461ef465e1943ac93
SHA512 918fe77425fe3a683a1f0432671d01d498aff0f58ae20fd41e11e9fd3f6f40770dcb50b64e3825efdd8423a8665d2b36ac22b9288b0499a7410e95c00bba8f18
SSDEEP 6144:l48TpWQ71lhlPxITIhFVyEWGNCIldSGBlcIs0U7oyGFXC6NDq:l48TpWEHiYXyEhNldSFIs0U7FG0+Dq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa9aeb5dc18f2ccbc53d908739b7fc5ed24ab56350c1caed9542adac9eb3aee9

File Explorer

aa9aeb5dc18f2ccbc53d908739b7fc5ed24ab56350c1caed9542adac9eb3aee9

.exe 419KB

aa9aeb5dc18f2ccbc53d908739b7fc5ed24ab56350c1caed9542adac9eb3aee9

IMPHASH 7dbb2839a04ef2a95f6f34d46870a8c1
SHA256 aa9aeb5dc18f2ccbc53d908739b7fc5ed24ab56350c1caed9542adac9eb3aee9
MD5 f224e965364493adc16243a8364c4459
SHA1 37cefe4b5169c382e1822f0461ef465e1943ac93
SHA512 918fe77425fe3a683a1f0432671d01d498aff0f58ae20fd41e11e9fd3f6f40770dcb50b64e3825efdd8423a8665d2b36ac22b9288b0499a7410e95c00bba8f18
SSDEEP 6144:l48TpWQ71lhlPxITIhFVyEWGNCIldSGBlcIs0U7oyGFXC6NDq:l48TpWEHiYXyEhNldSFIs0U7FG0+Dq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA SetFileAttributesA SetFileApisToOEM LoadLibraryA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA BuildCommDCBA GetCurrentDirectoryA GetSystemTime GetVolumeInformationW SetConsoleTitleA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

aa9aeb5dc18f2ccbc53d908739b7fc5ed24ab56350c1caed9542adac9eb3aee9

kernel32

advapi32

generic