2125d67c6ad89d83c34a203f62b5c63025bb710519b6c7b3c7a22c0550726175

General

Target
2125d67c6ad89d83c34a203f62b5c63025bb710519b6c7b3c7a22c0550726175
Size 368KB
Sample240508-l47cnafa8t
SHA256 2125d67c6ad89d83c34a203f62b5c63025bb710519b6c7b3c7a22c0550726175
MD5 c928d71190d16ffcc234ee1061934501
SHA1 40ea2a949190aac9ad3e17d5cccb6d51014bf065
SHA512 9d60d54298e5e3d2e8d5eea26178fbbbca09acfc621556f48f63c34f19eaf4aec8c8b9da8c211dcd1e2df167a14914fe00e92dec2128f9774475694d7f14b966
SSDEEP 6144:FelyjzIpb2xE5BNqj+DYvjZask87WlizIwYYozY/TZ4tjK:YlyjzIpbyE6yDYFask87Oi9Z4tjK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2125d67c6ad89d83c34a203f62b5c63025bb710519b6c7b3c7a22c0550726175

File Explorer

2125d67c6ad89d83c34a203f62b5c63025bb710519b6c7b3c7a22c0550726175

.exe 368KB

2125d67c6ad89d83c34a203f62b5c63025bb710519b6c7b3c7a22c0550726175

IMPHASH 1bcfaa80ba14b73402b93e3932b63bb5
SHA256 2125d67c6ad89d83c34a203f62b5c63025bb710519b6c7b3c7a22c0550726175
MD5 c928d71190d16ffcc234ee1061934501
SHA1 40ea2a949190aac9ad3e17d5cccb6d51014bf065
SHA512 9d60d54298e5e3d2e8d5eea26178fbbbca09acfc621556f48f63c34f19eaf4aec8c8b9da8c211dcd1e2df167a14914fe00e92dec2128f9774475694d7f14b966
SSDEEP 6144:FelyjzIpb2xE5BNqj+DYvjZask87WlizIwYYozY/TZ4tjK:YlyjzIpbyE6yDYFask87Oi9Z4tjK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GlobalMemoryStatus SetFilePointer InterlockedIncrement GetCommState GetConsoleAliasA SetComputerNameW LockFile GetModuleHandleW GetTickCount GetWindowsDirectoryA EnumTimeFormatsA GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW InterlockedExchange GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA BuildCommDCBW LoadLibraryA LocalAlloc CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW LoadLibraryExA VirtualProtect SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW HeapFree EncodePointer DecodePointer ReadFile GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetProcessHeap ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize SetFilePointerEx GetConsoleMode ReadConsoleW GetCurrentThreadId GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc LCMapStringW SetStdHandle FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetCaretBlinkTime SetMenu

Sharing

General

Malware Config

Signatures

File Explorer

2125d67c6ad89d83c34a203f62b5c63025bb710519b6c7b3c7a22c0550726175

kernel32

user32

generic