3a5d92caadc5452ae939468270051288bd71806d491ff3a5eedca22248db9882

General

Target
3a5d92caadc5452ae939468270051288bd71806d491ff3a5eedca22248db9882
Size 728KB
Sample240520-p5kf3abe36
SHA256 3a5d92caadc5452ae939468270051288bd71806d491ff3a5eedca22248db9882
MD5 dc63173384ebef8ac53e1862fa9465eb
SHA1 b963a9afd02903bdada23fc63ccbd0d23b98419d
SHA512 e01775835863982b6b376ac8ce1404ec295c75179da64c68a5be0a60107ac81c480ab8e3fbf76cf14d168612b546f102de1a0f15985fda84dd12dfa8c55e066c
SSDEEP 12288:gfZxRYM1fX/TTKTSVbcjBsAeZwiZlUUIJsV0jvtDFq0:SH5XfKTO6siiZlUDJG4Zq0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a5d92caadc5452ae939468270051288bd71806d491ff3a5eedca22248db9882

File Explorer

3a5d92caadc5452ae939468270051288bd71806d491ff3a5eedca22248db9882

.exe 728KB

3a5d92caadc5452ae939468270051288bd71806d491ff3a5eedca22248db9882

IMPHASH 965b002ae05e80f1dd898254cb5f61fa
SHA256 3a5d92caadc5452ae939468270051288bd71806d491ff3a5eedca22248db9882
MD5 dc63173384ebef8ac53e1862fa9465eb
SHA1 b963a9afd02903bdada23fc63ccbd0d23b98419d
SHA512 e01775835863982b6b376ac8ce1404ec295c75179da64c68a5be0a60107ac81c480ab8e3fbf76cf14d168612b546f102de1a0f15985fda84dd12dfa8c55e066c
SSDEEP 12288:gfZxRYM1fX/TTKTSVbcjBsAeZwiZlUUIJsV0jvtDFq0:SH5XfKTO6siiZlUDJG4Zq0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TzSpecificLocalTimeToSystemTime GetVolumeInformationA WriteConsoleW GetSystemDirectoryA SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress GetTickCount LoadLibraryA WriteConsoleA LocalAlloc GetNumberFormatW CreateEventW GetModuleFileNameA LoadLibraryExA BuildCommDCBA VirtualProtect PurgeComm SetFileAttributesW RemoveDirectoryA GetConsoleAliasA IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection HeapFree ReadFile SetFilePointerEx DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleMode ReadConsoleW SetStdHandle FlushFileBuffers GetConsoleCP OutputDebugStringW GetStringTypeW CreateFileW CloseHandle SetEndOfFile

gdi32

GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

3a5d92caadc5452ae939468270051288bd71806d491ff3a5eedca22248db9882

kernel32

gdi32

generic