5d711364f716a3ca2fc403dc12ba6d19ce33bffdc574723c1ab096f10d482b2f

General

Target
5d711364f716a3ca2fc403dc12ba6d19ce33bffdc574723c1ab096f10d482b2f
Size 11.5MB
Sample240507-lb1peach63
SHA256 5d711364f716a3ca2fc403dc12ba6d19ce33bffdc574723c1ab096f10d482b2f
MD5 02fde23cc0d95d23d10abe0a8c4ef375
SHA1 9c8d4db37c2bae77a1d4618b5ac01465a9885a0f
SHA512 93eb2ac2523589e9990bf1b101278836a75abc9e62cef6294a94854edbd86c2259400d715a0436fed7d5af81b5ea3e7cf274ea085207eeab528eecc83cc747b2
SSDEEP 49152:Hgs8e44444444444444444444444444444444444444444444444444444444444:Hg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d711364f716a3ca2fc403dc12ba6d19ce33bffdc574723c1ab096f10d482b2f

File Explorer

5d711364f716a3ca2fc403dc12ba6d19ce33bffdc574723c1ab096f10d482b2f

.exe 11.5MB

5d711364f716a3ca2fc403dc12ba6d19ce33bffdc574723c1ab096f10d482b2f

IMPHASH ce5bfe8f00bb2225d4db9db30ca61940
SHA256 5d711364f716a3ca2fc403dc12ba6d19ce33bffdc574723c1ab096f10d482b2f
MD5 02fde23cc0d95d23d10abe0a8c4ef375
SHA1 9c8d4db37c2bae77a1d4618b5ac01465a9885a0f
SHA512 93eb2ac2523589e9990bf1b101278836a75abc9e62cef6294a94854edbd86c2259400d715a0436fed7d5af81b5ea3e7cf274ea085207eeab528eecc83cc747b2
SSDEEP 49152:Hgs8e44444444444444444444444444444444444444444444444444444444444:Hg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

29968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xefalowuxaso xigu\65\jov_xivifot\korevucufa\xiz.pdb

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP

Sharing

General

Malware Config

Signatures

File Explorer

5d711364f716a3ca2fc403dc12ba6d19ce33bffdc574723c1ab096f10d482b2f

kernel32

generic