d5c6b91854155aa588b8f8b4e6fde8ebd63a8242e8c5155b596af43ed4b18bfc

General

Target
d5c6b91854155aa588b8f8b4e6fde8ebd63a8242e8c5155b596af43ed4b18bfc
Size 372KB
Sample240507-bzd57sfd87
SHA256 d5c6b91854155aa588b8f8b4e6fde8ebd63a8242e8c5155b596af43ed4b18bfc
MD5 2fe6a99d5b9a11d0ad344ab3ec2cefd0
SHA1 9812465bc9f90510f4e6fc70f5a1b7d3c1855a84
SHA512 069b42e1ad8d1d6573bc3e001605b4f5957bcdd1467734f32f9e04c4b8e0f6be03f244caa3cf9ac16c6fc201e6aa37c0fbede6592bade8f049a84f1a7d0dd40b
SSDEEP 6144:pl+08UGGfdzF7qxvwcB793ituNKkzXwGZTapY:p808UGgdtqrhauN3XwwapY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c6b91854155aa588b8f8b4e6fde8ebd63a8242e8c5155b596af43ed4b18bfc

File Explorer

d5c6b91854155aa588b8f8b4e6fde8ebd63a8242e8c5155b596af43ed4b18bfc

.exe 372KB

d5c6b91854155aa588b8f8b4e6fde8ebd63a8242e8c5155b596af43ed4b18bfc

IMPHASH 202c5f3b37dd83ef907f5d8113e17ecd
SHA256 d5c6b91854155aa588b8f8b4e6fde8ebd63a8242e8c5155b596af43ed4b18bfc
MD5 2fe6a99d5b9a11d0ad344ab3ec2cefd0
SHA1 9812465bc9f90510f4e6fc70f5a1b7d3c1855a84
SHA512 069b42e1ad8d1d6573bc3e001605b4f5957bcdd1467734f32f9e04c4b8e0f6be03f244caa3cf9ac16c6fc201e6aa37c0fbede6592bade8f049a84f1a7d0dd40b
SSDEEP 6144:pl+08UGGfdzF7qxvwcB793ituNKkzXwGZTapY:p808UGgdtqrhauN3XwwapY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17180

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalMemoryStatus SetFilePointer InterlockedIncrement GetCommState InterlockedDecrement GetComputerNameW LockFile GetModuleHandleW EnumTimeFormatsA GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW ReadConsoleInputA GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW GetLastError SetLastError GetProcAddress BackupWrite RemoveDirectoryA SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW LoadLibraryExA VirtualProtect GetVersionExA GetWindowsDirectoryW SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

SetMenu GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

d5c6b91854155aa588b8f8b4e6fde8ebd63a8242e8c5155b596af43ed4b18bfc

kernel32

user32

generic