aa454ce02cdf1ae74340c5cf10210a1ae98aea9f66f943fe9e934814ed62e5da

General

Target
aa454ce02cdf1ae74340c5cf10210a1ae98aea9f66f943fe9e934814ed62e5da
Size 416KB
Sample240507-ft2frsag71
SHA256 aa454ce02cdf1ae74340c5cf10210a1ae98aea9f66f943fe9e934814ed62e5da
MD5 b8cb97eb77d2b5ed5fa06618d4905f45
SHA1 669965a097220ccd45faa258b7b8c229c25ec315
SHA512 6af7d3fddf3bbc03692b6b3f1367bfc516d5b64c257fd776278109a870457889c3b53415c0c3cd6c124737263eb0cf8b7af224c47dfa366f8bccd2de1602c96b
SSDEEP 6144:Wo9w+UAlO8GJjy6USAEk3//piLPXpuNoS4ObrpJhYQPH7kpCuMXl:WoiiL4AE+h6ZLS4ovhLuCzl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa454ce02cdf1ae74340c5cf10210a1ae98aea9f66f943fe9e934814ed62e5da

File Explorer

aa454ce02cdf1ae74340c5cf10210a1ae98aea9f66f943fe9e934814ed62e5da

.exe 416KB

aa454ce02cdf1ae74340c5cf10210a1ae98aea9f66f943fe9e934814ed62e5da

IMPHASH f493c5847323619f5e4221c1f78ba727
SHA256 aa454ce02cdf1ae74340c5cf10210a1ae98aea9f66f943fe9e934814ed62e5da
MD5 b8cb97eb77d2b5ed5fa06618d4905f45
SHA1 669965a097220ccd45faa258b7b8c229c25ec315
SHA512 6af7d3fddf3bbc03692b6b3f1367bfc516d5b64c257fd776278109a870457889c3b53415c0c3cd6c124737263eb0cf8b7af224c47dfa366f8bccd2de1602c96b
SSDEEP 6144:Wo9w+UAlO8GJjy6USAEk3//piLPXpuNoS4ObrpJhYQPH7kpCuMXl:WoiiL4AE+h6ZLS4ovhLuCzl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement EnumCalendarInfoW GetCommState SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes LoadLibraryW GetLocaleInfoW AssignProcessToJobObject IsBadCodePtr lstrcpynW FindFirstFileExA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW GetSystemTime SetFileAttributesW GetVolumeInformationW GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc MultiByteToWideChar HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

aa454ce02cdf1ae74340c5cf10210a1ae98aea9f66f943fe9e934814ed62e5da

kernel32

generic