2ac8491eca16795aef58b5eed0bcab48b6555a2a31a627e6ec0a2b1a7b390a12

General

Target
2ac8491eca16795aef58b5eed0bcab48b6555a2a31a627e6ec0a2b1a7b390a12
Size 730KB
Sample240509-2p5taaba6z
SHA256 2ac8491eca16795aef58b5eed0bcab48b6555a2a31a627e6ec0a2b1a7b390a12
MD5 9ba94ba3651f466b6819b6e36bd5ef08
SHA1 ebd7d5ccb991280241eb27b2e4a3a84f0a1a22cb
SHA512 96557623c8d696187902155994fe12747ff8be160e2814ef12c5b28ac3ceaf0c074d70809d7aa0846702b11660a3b66e538f7533ea1d60d248e7ff2877c09981
SSDEEP 12288:Aa4NU9+jvuJ+B2adzl/GSiCrZ87cy2mIqkr7qBhaDlAealsv4x/FQihH+jWrJ:AXCo2an/htyt11faG8ici
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ac8491eca16795aef58b5eed0bcab48b6555a2a31a627e6ec0a2b1a7b390a12

File Explorer

2ac8491eca16795aef58b5eed0bcab48b6555a2a31a627e6ec0a2b1a7b390a12

.exe 730KB

2ac8491eca16795aef58b5eed0bcab48b6555a2a31a627e6ec0a2b1a7b390a12

IMPHASH 202c5f3b37dd83ef907f5d8113e17ecd
SHA256 2ac8491eca16795aef58b5eed0bcab48b6555a2a31a627e6ec0a2b1a7b390a12
MD5 9ba94ba3651f466b6819b6e36bd5ef08
SHA1 ebd7d5ccb991280241eb27b2e4a3a84f0a1a22cb
SHA512 96557623c8d696187902155994fe12747ff8be160e2814ef12c5b28ac3ceaf0c074d70809d7aa0846702b11660a3b66e538f7533ea1d60d248e7ff2877c09981
SSDEEP 12288:Aa4NU9+jvuJ+B2adzl/GSiCrZ87cy2mIqkr7qBhaDlAealsv4x/FQihH+jWrJ:AXCo2an/htyt11faG8ici
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17180

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalMemoryStatus SetFilePointer InterlockedIncrement GetCommState InterlockedDecrement GetComputerNameW LockFile GetModuleHandleW EnumTimeFormatsA GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW ReadConsoleInputA GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW GetLastError SetLastError GetProcAddress BackupWrite RemoveDirectoryA SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW LoadLibraryExA VirtualProtect GetVersionExA GetWindowsDirectoryW SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

SetMenu GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

2ac8491eca16795aef58b5eed0bcab48b6555a2a31a627e6ec0a2b1a7b390a12

kernel32

user32

generic