5582b042cd5654b5fe130a0ecb5c1e6a4acafc2699e43623625d0ec1393e7439

General

Target
5582b042cd5654b5fe130a0ecb5c1e6a4acafc2699e43623625d0ec1393e7439
Size 291KB
Sample240507-2v6b1afc87
SHA256 5582b042cd5654b5fe130a0ecb5c1e6a4acafc2699e43623625d0ec1393e7439
MD5 09cce7e12afde07e856d5b9bd990b945
SHA1 69fdc0f8b44a74c3d2230837dd8f921d33be5ad8
SHA512 55f479aa7e01174d496f6114d432ab5f6899f8b1b84539fe0f4aa9531f02940ffaa4927a9d6e926b121db1c7a50d8473177f0b9f6b549fc2923c1e361bb4e0dc
SSDEEP 3072:Q4vDiILrTSTgbSQ0muEXtQM2VqWTDnwzn9DYsDek55WeqDqu0E5PUiLi:Q4vDikr+ESq3F2wWTzwr90sakie8zf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5582b042cd5654b5fe130a0ecb5c1e6a4acafc2699e43623625d0ec1393e7439

File Explorer

5582b042cd5654b5fe130a0ecb5c1e6a4acafc2699e43623625d0ec1393e7439

.exe 291KB

5582b042cd5654b5fe130a0ecb5c1e6a4acafc2699e43623625d0ec1393e7439

IMPHASH 20a6a1c56501f5fd78f9b0e0618fa18b
SHA256 5582b042cd5654b5fe130a0ecb5c1e6a4acafc2699e43623625d0ec1393e7439
MD5 09cce7e12afde07e856d5b9bd990b945
SHA1 69fdc0f8b44a74c3d2230837dd8f921d33be5ad8
SHA512 55f479aa7e01174d496f6114d432ab5f6899f8b1b84539fe0f4aa9531f02940ffaa4927a9d6e926b121db1c7a50d8473177f0b9f6b549fc2923c1e361bb4e0dc
SSDEEP 3072:Q4vDiILrTSTgbSQ0muEXtQM2VqWTDnwzn9DYsDek55WeqDqu0E5PUiLi:Q4vDikr+ESq3F2wWTzwr90sakie8zf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

5582b042cd5654b5fe130a0ecb5c1e6a4acafc2699e43623625d0ec1393e7439

kernel32

advapi32

generic