5913b56762d3253e0d9cefdd62f311f2a1a902f643b4c4cdb0220d1a38a3dbf9

Sharing

Copy URL Twitter E-mail

General

Target
5913b56762d3253e0d9cefdd62f311f2a1a902f643b4c4cdb0220d1a38a3dbf9
Size 228KB
Sample240516-spa48sag99
SHA256 5913b56762d3253e0d9cefdd62f311f2a1a902f643b4c4cdb0220d1a38a3dbf9
MD5 ca20476eab92bfb30bbd6b7ad2961010
SHA1 549e27826585706b0a3fbd5ca62fe9cf94360242
SHA512 1355f0da04dbc5fe79c122793a6ffa720dfb932d07910fb1dc2a728751fb2e4636439c03016f2a9276f838133fd98768a7b6ee086c553d78b75d57c8c7ddd350
SSDEEP 6144:wB5Q/aqNI6aZg0RMrKB0uEdRj4pHLKd1k6cw:kDZgCMrk0u1Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5913b56762d3253e0d9cefdd62f311f2a1a902f643b4c4cdb0220d1a38a3dbf9

File Explorer

5913b56762d3253e0d9cefdd62f311f2a1a902f643b4c4cdb0220d1a38a3dbf9

.exe 228KB

5913b56762d3253e0d9cefdd62f311f2a1a902f643b4c4cdb0220d1a38a3dbf9

IMPHASH 0a1b694cded55d63fb2b3a5a40f4522c
SHA256 5913b56762d3253e0d9cefdd62f311f2a1a902f643b4c4cdb0220d1a38a3dbf9
MD5 ca20476eab92bfb30bbd6b7ad2961010
SHA1 549e27826585706b0a3fbd5ca62fe9cf94360242
SHA512 1355f0da04dbc5fe79c122793a6ffa720dfb932d07910fb1dc2a728751fb2e4636439c03016f2a9276f838133fd98768a7b6ee086c553d78b75d57c8c7ddd350
SSDEEP 6144:wB5Q/aqNI6aZg0RMrKB0uEdRj4pHLKd1k6cw:kDZgCMrk0u1Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16387

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetTickCount GetSystemDirectoryW WriteConsoleW SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress RemoveDirectoryA LoadLibraryA OpenMutexA SystemTimeToTzSpecificLocalTime LocalAlloc GetNumberFormatW CreateEventW GetModuleFileNameA LoadLibraryExA BuildCommDCBA VirtualProtect PurgeComm GetVolumeInformationW CloseHandle CreateFileW GetStringTypeW OutputDebugStringW WriteConsoleA GetComputerNameA FlushFileBuffers GetConsoleCP IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection ReadFile GetConsoleMode ReadConsoleW HeapFree GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc SetStdHandle LCMapStringW SetEndOfFile

user32

SetCaretPos GetMenuItemID ChangeDisplaySettingsW

gdi32

GetCharWidthI

ole32

CoMarshalHresult

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

5913b56762d3253e0d9cefdd62f311f2a1a902f643b4c4cdb0220d1a38a3dbf9

kernel32

user32

gdi32

ole32

msimg32

generic