2fee074a785a5887aa388d72e7691f71d7a185a70ac41a976cd763def89fda57

General

Target
2fee074a785a5887aa388d72e7691f71d7a185a70ac41a976cd763def89fda57
Size 450KB
Sample240507-addf4scd59
SHA256 2fee074a785a5887aa388d72e7691f71d7a185a70ac41a976cd763def89fda57
MD5 b7abc31024edcc51ecf5fff3b50cc057
SHA1 36afaa365ef0dd8fcc3707e2b037c4879e6c0a34
SHA512 1ec703253b9998d8679fe89781c6a69787b2df670aa94d6ed5ce451acb8966d4b2b6f899620274bd52779d1b71e84813b8becd7906c2b56f118e9e28cfb4bbd1
SSDEEP 12288:LG2lUG0NVvKXW/WqwO0YSTPZSeSnnKPkDV:LgVvoU9fsPUeSKPkDV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fee074a785a5887aa388d72e7691f71d7a185a70ac41a976cd763def89fda57

File Explorer

2fee074a785a5887aa388d72e7691f71d7a185a70ac41a976cd763def89fda57

.exe 450KB

2fee074a785a5887aa388d72e7691f71d7a185a70ac41a976cd763def89fda57

IMPHASH 202c5f3b37dd83ef907f5d8113e17ecd
SHA256 2fee074a785a5887aa388d72e7691f71d7a185a70ac41a976cd763def89fda57
MD5 b7abc31024edcc51ecf5fff3b50cc057
SHA1 36afaa365ef0dd8fcc3707e2b037c4879e6c0a34
SHA512 1ec703253b9998d8679fe89781c6a69787b2df670aa94d6ed5ce451acb8966d4b2b6f899620274bd52779d1b71e84813b8becd7906c2b56f118e9e28cfb4bbd1
SSDEEP 12288:LG2lUG0NVvKXW/WqwO0YSTPZSeSnnKPkDV:LgVvoU9fsPUeSKPkDV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17180

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalMemoryStatus SetFilePointer InterlockedIncrement GetCommState InterlockedDecrement GetComputerNameW LockFile GetModuleHandleW EnumTimeFormatsA GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW ReadConsoleInputA GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW GetLastError SetLastError GetProcAddress BackupWrite RemoveDirectoryA SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW LoadLibraryExA VirtualProtect GetVersionExA GetWindowsDirectoryW SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

SetMenu GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

2fee074a785a5887aa388d72e7691f71d7a185a70ac41a976cd763def89fda57

kernel32

user32

generic