2ec2583edf935a0b71968c81e50358790cbcad334e88dc5d9ee87f716978fbd8

General

Target
2ec2583edf935a0b71968c81e50358790cbcad334e88dc5d9ee87f716978fbd8
Size 373KB
Sample240510-pvtxraab59
SHA256 2ec2583edf935a0b71968c81e50358790cbcad334e88dc5d9ee87f716978fbd8
MD5 1cc59ed1f9fb86fa17aa40eff895af87
SHA1 d155623485082e66f1fde795b5c9a544805f75ad
SHA512 2ada3990f204fe9357e9feb657d534760bf82128f3447d50ac3cd2ed8e84d124341540c0bbeeb14f9d16026767ba2fc3a8058ba9e56b1c04b4e4e62d5c81b045
SSDEEP 6144:Xm7tnXHiPWJ/b1ZPB66To26pxlW0BmbtKjCouJJtqOCFgqIt0TtMY:Xm7tnyOtb1ZZ66TrbqiIFGqmY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ec2583edf935a0b71968c81e50358790cbcad334e88dc5d9ee87f716978fbd8

File Explorer

2ec2583edf935a0b71968c81e50358790cbcad334e88dc5d9ee87f716978fbd8

.exe 373KB

2ec2583edf935a0b71968c81e50358790cbcad334e88dc5d9ee87f716978fbd8

IMPHASH c7c40a60900333ddf55dd487e2300ddd
SHA256 2ec2583edf935a0b71968c81e50358790cbcad334e88dc5d9ee87f716978fbd8
MD5 1cc59ed1f9fb86fa17aa40eff895af87
SHA1 d155623485082e66f1fde795b5c9a544805f75ad
SHA512 2ada3990f204fe9357e9feb657d534760bf82128f3447d50ac3cd2ed8e84d124341540c0bbeeb14f9d16026767ba2fc3a8058ba9e56b1c04b4e4e62d5c81b045
SSDEEP 6144:Xm7tnXHiPWJ/b1ZPB66To26pxlW0BmbtKjCouJJtqOCFgqIt0TtMY:Xm7tnyOtb1ZZ66TrbqiIFGqmY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17412

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GlobalMemoryStatus SetFilePointer SetComputerNameExA GetConsoleAliasA InterlockedDecrement SetComputerNameW SetCommBreak CreateHardLinkA LockFile GetModuleHandleW GetTickCount GetWindowsDirectoryA EnumTimeFormatsA SetCommState GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA GetSystemDirectoryA GetACP InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA BuildCommDCBW WriteConsoleA LocalAlloc SetConsoleOutputCP CreateEventW AddAtomA LoadLibraryExA VirtualProtect GetTempPathA SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW WriteConsoleW GetStringTypeW HeapFree EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetProcessHeap HeapSize SetFilePointerEx GetConsoleMode ReadConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleCP HeapReAlloc LCMapStringW SetStdHandle FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetSysColorBrush SetMessageExtraInfo SetMenu

Sharing

General

Malware Config

Signatures

File Explorer

2ec2583edf935a0b71968c81e50358790cbcad334e88dc5d9ee87f716978fbd8

kernel32

user32

generic