05a983eb0ead37a3613148ab82d17d37827ff4e6a1252e44a203d8fc3502dcd7

General

Target
05a983eb0ead37a3613148ab82d17d37827ff4e6a1252e44a203d8fc3502dcd7
Size 532KB
Sample240507-cnd7hagg44
SHA256 05a983eb0ead37a3613148ab82d17d37827ff4e6a1252e44a203d8fc3502dcd7
MD5 8c5cbd33a7677af0c51ac49874c09d51
SHA1 942860ed067ad591f8447fd86cf22831278f56a9
SHA512 3b53aae26d6ec154048981904e27073a88a9b739e358948ed5bdeb0f0d84b05a864d418b2e89007dac391433edd64ee551f72651c660cff6af74fc3ab7857b10
SSDEEP 12288:WvuU+rl40uJyhQb5Qgi96VKTlAHgp4FW7TAJddG0FTO:3buJyGb46VYAH+4FWqTpE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05a983eb0ead37a3613148ab82d17d37827ff4e6a1252e44a203d8fc3502dcd7

File Explorer

05a983eb0ead37a3613148ab82d17d37827ff4e6a1252e44a203d8fc3502dcd7

.exe 532KB

05a983eb0ead37a3613148ab82d17d37827ff4e6a1252e44a203d8fc3502dcd7

IMPHASH 202c5f3b37dd83ef907f5d8113e17ecd
SHA256 05a983eb0ead37a3613148ab82d17d37827ff4e6a1252e44a203d8fc3502dcd7
MD5 8c5cbd33a7677af0c51ac49874c09d51
SHA1 942860ed067ad591f8447fd86cf22831278f56a9
SHA512 3b53aae26d6ec154048981904e27073a88a9b739e358948ed5bdeb0f0d84b05a864d418b2e89007dac391433edd64ee551f72651c660cff6af74fc3ab7857b10
SSDEEP 12288:WvuU+rl40uJyhQb5Qgi96VKTlAHgp4FW7TAJddG0FTO:3buJyGb46VYAH+4FWqTpE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17180

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalMemoryStatus SetFilePointer InterlockedIncrement GetCommState InterlockedDecrement GetComputerNameW LockFile GetModuleHandleW EnumTimeFormatsA GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW ReadConsoleInputA GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW GetLastError SetLastError GetProcAddress BackupWrite RemoveDirectoryA SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW LoadLibraryExA VirtualProtect GetVersionExA GetWindowsDirectoryW SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

SetMenu GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

05a983eb0ead37a3613148ab82d17d37827ff4e6a1252e44a203d8fc3502dcd7

kernel32

user32

generic