19db0a5131dd99b1af05a4c2b04948ea0a3a4307a34506eee732165825572407

General

Target
19db0a5131dd99b1af05a4c2b04948ea0a3a4307a34506eee732165825572407
Size 404KB
Sample240507-ygc7hsfa63
SHA256 19db0a5131dd99b1af05a4c2b04948ea0a3a4307a34506eee732165825572407
MD5 c2cd725c9947ccc6afdefb26a3bb5b6e
SHA1 facbedddff36beb284dc900000c1bc71f236169d
SHA512 00d917fb66d3d3208ce8265cb27ac6109866d7307f53cf20f37145ae8a16c93e4708cba87485478e95454d2663308d8aafafd0bed9d60235bebc86c8bd3fc1fb
SSDEEP 6144:I+hXdi5S6e9EioGDqP3/CFPi/uh9SqPLb6kACHXPH1D2B9DHf8:vi5SQGOPvCFPi/uhYwLbmC3PH1D2BR8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19db0a5131dd99b1af05a4c2b04948ea0a3a4307a34506eee732165825572407

File Explorer

19db0a5131dd99b1af05a4c2b04948ea0a3a4307a34506eee732165825572407

.exe 404KB

19db0a5131dd99b1af05a4c2b04948ea0a3a4307a34506eee732165825572407

IMPHASH 846e3703eabe2e97bf5cd60565d49593
SHA256 19db0a5131dd99b1af05a4c2b04948ea0a3a4307a34506eee732165825572407
MD5 c2cd725c9947ccc6afdefb26a3bb5b6e
SHA1 facbedddff36beb284dc900000c1bc71f236169d
SHA512 00d917fb66d3d3208ce8265cb27ac6109866d7307f53cf20f37145ae8a16c93e4708cba87485478e95454d2663308d8aafafd0bed9d60235bebc86c8bd3fc1fb
SSDEEP 6144:I+hXdi5S6e9EioGDqP3/CFPi/uh9SqPLb6kACHXPH1D2B9DHf8:vi5SQGOPvCFPi/uhYwLbmC3PH1D2BR8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement EnumCalendarInfoW GetCommState SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FindFirstFileExW GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GlobalAlloc LoadLibraryW GetLocaleInfoW lstrcpynW IsBadWritePtr SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA OpenJobObjectW FindAtomA FreeEnvironmentStringsW EnumDateFormatsW GetSystemTime SetFileAttributesW HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

19db0a5131dd99b1af05a4c2b04948ea0a3a4307a34506eee732165825572407

kernel32

generic