e6338bc58800f98b3e631ef96bb81ca0_NEAS

General

Target
e6338bc58800f98b3e631ef96bb81ca0_NEAS
Size 275KB
Sample240507-vn8efsaa89
SHA256 b3399180ca036676795483dc9376cde5cd49e81de90b124f7d49ccf447f6c9f3
MD5 e6338bc58800f98b3e631ef96bb81ca0
SHA1 bfd297f691706ab8a395254019f784b4e14e1183
SHA512 56465542c08324accc31378d5988314d276d0853f7a400d8a5f36ca439c7fa92aa3b8095558a1b06933d0036a07afd74c4e91c6a3a6c77f504fc1ff995090fb9
SSDEEP 3072:ABjUoMmq6bGaxjVYnU+wjeKcgfIx7gB323EQjH5eVqENa5:IMmTj4UGgQdgB7Vu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6338bc58800f98b3e631ef96bb81ca0_NEAS

File Explorer

e6338bc58800f98b3e631ef96bb81ca0_NEAS

.exe 275KB

e6338bc58800f98b3e631ef96bb81ca0_NEAS

IMPHASH 52b79fc353b1fbde3deec87dc6558397
SHA256 b3399180ca036676795483dc9376cde5cd49e81de90b124f7d49ccf447f6c9f3
MD5 e6338bc58800f98b3e631ef96bb81ca0
SHA1 bfd297f691706ab8a395254019f784b4e14e1183
SHA512 56465542c08324accc31378d5988314d276d0853f7a400d8a5f36ca439c7fa92aa3b8095558a1b06933d0036a07afd74c4e91c6a3a6c77f504fc1ff995090fb9
SSDEEP 3072:ABjUoMmq6bGaxjVYnU+wjeKcgfIx7gB323EQjH5eVqENa5:IMmTj4UGgQdgB7Vu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW GetLocaleInfoW AssignProcessToJobObject IsBadCodePtr lstrcpynW SetConsoleTitleA FindFirstFileExA SetDefaultCommConfigW SetLastError GetProcAddress GetLongPathNameA SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW BuildCommDCBA GetSystemTime SetFileAttributesW GetVolumeInformationW GetCurrentDirectoryW EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

e6338bc58800f98b3e631ef96bb81ca0_NEAS

kernel32

advapi32

generic