23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658

General

Target
23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658
Size 524KB
Sample240508-2lsdsabd3x
SHA256 23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658
MD5 cf39df6760e145858728018ec24ee301
SHA1 9c70b1eaed52dca858c037a6f012026a3eab27df
SHA512 9836cba0721622f6877ca01657091523762244e18f8eb0d9c13a9ca1665569e207e8852f56e8ae5aa94af1db04bdf811e5cebe2c6a569c30ed13e031d2079eaf
SSDEEP 12288:ore6TPBPr6wOtiKeX42F31VsRL6eh+7f:olkPi42xs87f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658

File Explorer

23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658

.exe 524KB

23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658

IMPHASH 19740cd4fd3dcce67b00ed2a92e30452
SHA256 23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658
MD5 cf39df6760e145858728018ec24ee301
SHA1 9c70b1eaed52dca858c037a6f012026a3eab27df
SHA512 9836cba0721622f6877ca01657091523762244e18f8eb0d9c13a9ca1665569e207e8852f56e8ae5aa94af1db04bdf811e5cebe2c6a569c30ed13e031d2079eaf
SSDEEP 12288:ore6TPBPr6wOtiKeX42F31VsRL6eh+7f:olkPi42xs87f
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18465

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GlobalMemoryStatus SetFilePointer GetCommState GetConsoleAliasA InterlockedDecrement SetComputerNameW LockFile GetModuleHandleW GetTickCount GetWindowsDirectoryA EnumTimeFormatsA GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW InterlockedExchange GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA BuildCommDCBW LoadLibraryA LocalAlloc CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW LoadLibraryExA VirtualProtect SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW OutputDebugStringW HeapFree EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetProcessHeap HeapSize GetConsoleMode ReadConsoleW SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree WriteFile GetModuleFileNameW LoadLibraryExW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW GetConsoleCP HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers SetEndOfFile

user32

GetCaretBlinkTime SetMenu

Sharing

General

Malware Config

Signatures

File Explorer

23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658

kernel32

user32

generic