2a1cd81df3daa51669d6535bf5389d9eda80da154fce446f525ec4dd11d10b36

General

Target
2a1cd81df3daa51669d6535bf5389d9eda80da154fce446f525ec4dd11d10b36
Size 416KB
Sample240506-pgm72sbd6t
SHA256 2a1cd81df3daa51669d6535bf5389d9eda80da154fce446f525ec4dd11d10b36
MD5 a2b1361249f3a5f11410fb6588cf88d8
SHA1 285ea7b4964846712fb1159ee201eb526c3e15d9
SHA512 fe321836a8bff5b332c55646be52235a8361ac22e64a1b1b79157f9c85bcaaf9047abefa04d5200865eaf7a8b279d9fbf45d827466912a55d335b8b44574c16c
SSDEEP 6144:f/sljtGLGm0LFOvzmqUW8TcCovExfTp87gctz9Cc1jUyBnxeLDYtaZl:f/sljMLnmgSSecCmgpyz9C2/nO0tcl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a1cd81df3daa51669d6535bf5389d9eda80da154fce446f525ec4dd11d10b36

File Explorer

2a1cd81df3daa51669d6535bf5389d9eda80da154fce446f525ec4dd11d10b36

.exe 416KB

2a1cd81df3daa51669d6535bf5389d9eda80da154fce446f525ec4dd11d10b36

IMPHASH 97071217f05bf2e8bbd81955f4e3be85
SHA256 2a1cd81df3daa51669d6535bf5389d9eda80da154fce446f525ec4dd11d10b36
MD5 a2b1361249f3a5f11410fb6588cf88d8
SHA1 285ea7b4964846712fb1159ee201eb526c3e15d9
SHA512 fe321836a8bff5b332c55646be52235a8361ac22e64a1b1b79157f9c85bcaaf9047abefa04d5200865eaf7a8b279d9fbf45d827466912a55d335b8b44574c16c
SSDEEP 6144:f/sljtGLGm0LFOvzmqUW8TcCovExfTp87gctz9Cc1jUyBnxeLDYtaZl:f/sljMLnmgSSecCmgpyz9C2/nO0tcl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17202

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer SetComputerNameExA InterlockedIncrement InterlockedDecrement GetComputerNameW LockFile BackupSeek EnumTimeFormatsW SetCommState GlobalAlloc GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW GetConsoleAliasW GetACP GetConsoleOutputCP GetLastError SetLastError GetProcAddress SetComputerNameA BuildCommDCBW WriteConsoleA CreateHardLinkW CreateEventW RemoveDirectoryW AddAtomA GlobalUnWire GetModuleHandleA LoadLibraryExA VirtualProtect GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetTempPathA SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW WriteConsoleW SetEndOfFile

user32

GetCaretPos ChangeMenuA

Sharing

General

Malware Config

Signatures

File Explorer

2a1cd81df3daa51669d6535bf5389d9eda80da154fce446f525ec4dd11d10b36

kernel32

user32

generic