a99357efa9bc59ee24d82b44d436053de4242598517238d3d012ccf9bd4ba37c

General

Target
a99357efa9bc59ee24d82b44d436053de4242598517238d3d012ccf9bd4ba37c
Size 416KB
Sample240505-vcs6dsfc3w
SHA256 a99357efa9bc59ee24d82b44d436053de4242598517238d3d012ccf9bd4ba37c
MD5 1f7a4c723a705b6fba1272466fed6106
SHA1 c4faa7668017628406dd85c916509fb18b95efd3
SHA512 e6de73ba002884b5e06af81156d5662b0f337503b01213329c551cfccdb099d1a1210921a6d61ce20bc3ac35bc444d2d8052dd1ed1b31491f8a754ae922f8712
SSDEEP 6144:4GNMZHV3J8HAzx1A1oPfAAIhpC3OHf8BuLRbGst71:rMhVZ24S1iAzpjHf8ByRp1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99357efa9bc59ee24d82b44d436053de4242598517238d3d012ccf9bd4ba37c

File Explorer

a99357efa9bc59ee24d82b44d436053de4242598517238d3d012ccf9bd4ba37c

.exe 416KB

a99357efa9bc59ee24d82b44d436053de4242598517238d3d012ccf9bd4ba37c

IMPHASH 787bf087217e36a86da431920ad51f39
SHA256 a99357efa9bc59ee24d82b44d436053de4242598517238d3d012ccf9bd4ba37c
MD5 1f7a4c723a705b6fba1272466fed6106
SHA1 c4faa7668017628406dd85c916509fb18b95efd3
SHA512 e6de73ba002884b5e06af81156d5662b0f337503b01213329c551cfccdb099d1a1210921a6d61ce20bc3ac35bc444d2d8052dd1ed1b31491f8a754ae922f8712
SSDEEP 6144:4GNMZHV3J8HAzx1A1oPfAAIhpC3OHf8BuLRbGst71:rMhVZ24S1iAzpjHf8ByRp1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW GetLocaleInfoW AssignProcessToJobObject IsBadCodePtr lstrcpynW FindFirstFileExA InterlockedIncrement SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW GetSystemTime SetFileAttributesW GetVolumeInformationW GetCurrentDirectoryW EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

a99357efa9bc59ee24d82b44d436053de4242598517238d3d012ccf9bd4ba37c

kernel32

advapi32

generic