130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75

General

Target
130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75
Size 245KB
Sample240508-2ewgvsdd38
SHA256 130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75
MD5 eab8a9b818ef4e23bd92d7420ee33b77
SHA1 f4751ca6ff4d24c3bfada9ad043835a27f04d2f5
SHA512 ce77e817741e460aa813d4efe1750f24f149bb4f7df23a06b7986c4ef09dc5303d0e0585928b78bf2b12dfa76a93f5bc8873fa03c8febe82b9c960ad41d1ff9f
SSDEEP 3072:TPh2xwoltiUJSigMfpzGUaG1v5jCnj95E:tWwoacgIyUaGzCjT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75

File Explorer

130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75

.exe 245KB

130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75

IMPHASH 40ce6fbcf20eabd423c57b484adbe4f8
SHA256 130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75
MD5 eab8a9b818ef4e23bd92d7420ee33b77
SHA1 f4751ca6ff4d24c3bfada9ad043835a27f04d2f5
SHA512 ce77e817741e460aa813d4efe1750f24f149bb4f7df23a06b7986c4ef09dc5303d0e0585928b78bf2b12dfa76a93f5bc8873fa03c8febe82b9c960ad41d1ff9f
SSDEEP 3072:TPh2xwoltiUJSigMfpzGUaG1v5jCnj95E:tWwoacgIyUaGzCjT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA GetCurrentDirectoryA GetSystemTime GetVolumeInformationW SetConsoleTitleA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75

kernel32

advapi32

generic