5a5a1194f8f5a81750205f5cfe21fae6969b40cfb77fba5385ba738f2a7ad3ee

General

Target
5a5a1194f8f5a81750205f5cfe21fae6969b40cfb77fba5385ba738f2a7ad3ee
Size 577KB
Sample240506-2k417ahe27
SHA256 5a5a1194f8f5a81750205f5cfe21fae6969b40cfb77fba5385ba738f2a7ad3ee
MD5 13b66643e6efa818780d69ee0bb06ee4
SHA1 0a80a1deb83f5a6dac0028156d786a7399582dc7
SHA512 7e133bcf41d8ab75e433d505dff9842dc4c1a7562bd2199aea81dcbe4ab6ce2373b68bec6ff243ea549670a8e3b79a3a3aea46b8e2c3f02827b3d3587655dbd9
SSDEEP 12288:IJQdGDC6j5ElJlPHVRCv2nOUth4vNRD1S8:IJQIDC6j5wJlvWv2nt41Ro8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a5a1194f8f5a81750205f5cfe21fae6969b40cfb77fba5385ba738f2a7ad3ee

File Explorer

5a5a1194f8f5a81750205f5cfe21fae6969b40cfb77fba5385ba738f2a7ad3ee

.exe 577KB

5a5a1194f8f5a81750205f5cfe21fae6969b40cfb77fba5385ba738f2a7ad3ee

IMPHASH 40ce6fbcf20eabd423c57b484adbe4f8
SHA256 5a5a1194f8f5a81750205f5cfe21fae6969b40cfb77fba5385ba738f2a7ad3ee
MD5 13b66643e6efa818780d69ee0bb06ee4
SHA1 0a80a1deb83f5a6dac0028156d786a7399582dc7
SHA512 7e133bcf41d8ab75e433d505dff9842dc4c1a7562bd2199aea81dcbe4ab6ce2373b68bec6ff243ea549670a8e3b79a3a3aea46b8e2c3f02827b3d3587655dbd9
SSDEEP 12288:IJQdGDC6j5ElJlPHVRCv2nOUth4vNRD1S8:IJQIDC6j5wJlvWv2nt41Ro8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA GetCurrentDirectoryA GetSystemTime GetVolumeInformationW SetConsoleTitleA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

5a5a1194f8f5a81750205f5cfe21fae6969b40cfb77fba5385ba738f2a7ad3ee

kernel32

advapi32

generic