2542caf838203c42ae6f7a21dc2243d50367bdbaab0d14d11e6cc89a1f926927

General

Target
2542caf838203c42ae6f7a21dc2243d50367bdbaab0d14d11e6cc89a1f926927
Size 408KB
Sample240507-ppm71sad52
SHA256 2542caf838203c42ae6f7a21dc2243d50367bdbaab0d14d11e6cc89a1f926927
MD5 e4f54147f4e172d62ac1b56c94af6bd8
SHA1 cc4662852fe8f3d5f3fe330813edf4ae4f7b6a82
SHA512 aebc6a0f89d450ef7040f68d5c3e0b586f04ef186ca160a85a86afd08a233b0d957695fec6c7d7851fb68811bf7ad0cef15835327062951b3dd1dd47200db686
SSDEEP 6144:b5cM23+UCrsxK18deKnuwQLRvB4GBx7jqlMM+0ljGkIX+BN5uATkshwxl:FBrsNe+mLRvdSL+0VRZDTks2xl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2542caf838203c42ae6f7a21dc2243d50367bdbaab0d14d11e6cc89a1f926927

File Explorer

2542caf838203c42ae6f7a21dc2243d50367bdbaab0d14d11e6cc89a1f926927

.exe 408KB

2542caf838203c42ae6f7a21dc2243d50367bdbaab0d14d11e6cc89a1f926927

IMPHASH c120aeb765d7b1b129cbbe564cf2c91f
SHA256 2542caf838203c42ae6f7a21dc2243d50367bdbaab0d14d11e6cc89a1f926927
MD5 e4f54147f4e172d62ac1b56c94af6bd8
SHA1 cc4662852fe8f3d5f3fe330813edf4ae4f7b6a82
SHA512 aebc6a0f89d450ef7040f68d5c3e0b586f04ef186ca160a85a86afd08a233b0d957695fec6c7d7851fb68811bf7ad0cef15835327062951b3dd1dd47200db686
SSDEEP 6144:b5cM23+UCrsxK18deKnuwQLRvB4GBx7jqlMM+0ljGkIX+BN5uATkshwxl:FBrsNe+mLRvdSL+0VRZDTks2xl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4977

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement EnumCalendarInfoW GetCommState SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FindFirstFileExW GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GlobalAlloc LoadLibraryW GetLocaleInfoW AssignProcessToJobObject IsBadCodePtr lstrcpynW SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA FindAtomA EnumDateFormatsA FreeEnvironmentStringsW GetSystemTime SetFileAttributesW GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile HeapSize CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

2542caf838203c42ae6f7a21dc2243d50367bdbaab0d14d11e6cc89a1f926927

kernel32

generic