c15692360544c878d0a5903b59bbf3a6fc8e3c6dd455d8f65df3e7c08bdaf445

General

Target
c15692360544c878d0a5903b59bbf3a6fc8e3c6dd455d8f65df3e7c08bdaf445
Size 365KB
Sample240509-3f5btsgd92
SHA256 c15692360544c878d0a5903b59bbf3a6fc8e3c6dd455d8f65df3e7c08bdaf445
MD5 be364eccc89d234412a69eacb70396a1
SHA1 96d66d3d1c7eddda469993f769a2164becef1b65
SHA512 f072f389ee0ffd11e07ed9a29f234a0430bf9ab5c256faad286abb6e005d8fb0213f2ee6b065a254b364861ed71487f12c572baa24b57195b16206f757128127
SSDEEP 6144:1/yLAzjI3/kXehHDXHmlk+gdfmXHduMiFScdOVMJVGga06LNH4THWF:ZyLA/IPkXehHDXGnghm7YSUOVoVcVLNL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c15692360544c878d0a5903b59bbf3a6fc8e3c6dd455d8f65df3e7c08bdaf445

File Explorer

c15692360544c878d0a5903b59bbf3a6fc8e3c6dd455d8f65df3e7c08bdaf445

.exe 365KB

c15692360544c878d0a5903b59bbf3a6fc8e3c6dd455d8f65df3e7c08bdaf445

IMPHASH 02869524aedd303a37883c9f742db589
SHA256 c15692360544c878d0a5903b59bbf3a6fc8e3c6dd455d8f65df3e7c08bdaf445
MD5 be364eccc89d234412a69eacb70396a1
SHA1 96d66d3d1c7eddda469993f769a2164becef1b65
SHA512 f072f389ee0ffd11e07ed9a29f234a0430bf9ab5c256faad286abb6e005d8fb0213f2ee6b065a254b364861ed71487f12c572baa24b57195b16206f757128127
SSDEEP 6144:1/yLAzjI3/kXehHDXHmlk+gdfmXHduMiFScdOVMJVGga06LNH4THWF:ZyLA/IPkXehHDXGnghm7YSUOVoVcVLNL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18513

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GlobalMemoryStatus SetFilePointer GetConsoleAliasA InterlockedDecrement SetComputerNameW SetCommBreak LockFile GetModuleHandleW GetTickCount GetWindowsDirectoryA EnumTimeFormatsA SetCommState GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA BuildCommDCBW LoadLibraryA LocalAlloc CreateHardLinkW SetConsoleOutputCP CreateEventW AddAtomA LoadLibraryExA VirtualProtect SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW OutputDebugStringW HeapFree EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetProcessHeap HeapSize GetConsoleMode ReadConsoleW SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree WriteFile GetModuleFileNameW LoadLibraryExW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW GetConsoleCP HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers SetEndOfFile

user32

GetCaretBlinkTime SetMenu

Sharing

General

Malware Config

Signatures

File Explorer

c15692360544c878d0a5903b59bbf3a6fc8e3c6dd455d8f65df3e7c08bdaf445

kernel32

user32

generic