4868254c2ef5a71bc705f2fa0e0ca61a25660312621fe7af385fa9d9e60ff379

General

Target
4868254c2ef5a71bc705f2fa0e0ca61a25660312621fe7af385fa9d9e60ff379
Size 416KB
Sample240505-vbv9csfb9y
SHA256 4868254c2ef5a71bc705f2fa0e0ca61a25660312621fe7af385fa9d9e60ff379
MD5 81b48054aeae580d8fc6aa1088ddd4df
SHA1 7c3aeb5c7077f913a8841dad17e560ec3aaa5db4
SHA512 9f940b49f6ce11d45ff1fccf6a3ce8fffdd6b100b9daf3895a7e308abdead7a549e8e67e259bf6bf58af7895909d898790fedf7a5dc760d56ad08eaf8fa5688d
SSDEEP 6144:4GNMZHV3J8HAzx1A1oPfAAIhpC3OHf8BuLRbGst76:rMhVZ24S1iAzpjHf8ByRp6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4868254c2ef5a71bc705f2fa0e0ca61a25660312621fe7af385fa9d9e60ff379

File Explorer

4868254c2ef5a71bc705f2fa0e0ca61a25660312621fe7af385fa9d9e60ff379

.exe 416KB

4868254c2ef5a71bc705f2fa0e0ca61a25660312621fe7af385fa9d9e60ff379

IMPHASH 787bf087217e36a86da431920ad51f39
SHA256 4868254c2ef5a71bc705f2fa0e0ca61a25660312621fe7af385fa9d9e60ff379
MD5 81b48054aeae580d8fc6aa1088ddd4df
SHA1 7c3aeb5c7077f913a8841dad17e560ec3aaa5db4
SHA512 9f940b49f6ce11d45ff1fccf6a3ce8fffdd6b100b9daf3895a7e308abdead7a549e8e67e259bf6bf58af7895909d898790fedf7a5dc760d56ad08eaf8fa5688d
SSDEEP 6144:4GNMZHV3J8HAzx1A1oPfAAIhpC3OHf8BuLRbGst76:rMhVZ24S1iAzpjHf8ByRp6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW GetLocaleInfoW AssignProcessToJobObject IsBadCodePtr lstrcpynW FindFirstFileExA InterlockedIncrement SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW GetSystemTime SetFileAttributesW GetVolumeInformationW GetCurrentDirectoryW EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

4868254c2ef5a71bc705f2fa0e0ca61a25660312621fe7af385fa9d9e60ff379

kernel32

advapi32

generic