5eed1b7c0087418dfe4321bf9e31f07fb349e40f7752e2a384e11b0255d7eb1e

General

Target
5eed1b7c0087418dfe4321bf9e31f07fb349e40f7752e2a384e11b0255d7eb1e
Size 727KB
Sample240520-pr7dnsbf8y
SHA256 5eed1b7c0087418dfe4321bf9e31f07fb349e40f7752e2a384e11b0255d7eb1e
MD5 c4172edef326fd136d095e8dcc9604d8
SHA1 50969ba8713726b3cb0c70f88377476ecae69755
SHA512 62613aa4063e1ca6fad20970e4d19519c6fe85cfa1833f4d9752c1d40a31a21c95a216f4a4e06a260177b4d44b8896322cfaf169726ab626c8576db062c3fb81
SSDEEP 12288:Cmmzqzn6XBLwMr7RWxlwag70lrCKRB6QafM4Fyk9oa80cEQEvPBqkH6tc0Bpq0:2XFpuGT7yhRB6QX45XdQkz6cwq0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eed1b7c0087418dfe4321bf9e31f07fb349e40f7752e2a384e11b0255d7eb1e

File Explorer

5eed1b7c0087418dfe4321bf9e31f07fb349e40f7752e2a384e11b0255d7eb1e

.exe 727KB

5eed1b7c0087418dfe4321bf9e31f07fb349e40f7752e2a384e11b0255d7eb1e

IMPHASH eb34476e5cf42ff772f480e56c558d75
SHA256 5eed1b7c0087418dfe4321bf9e31f07fb349e40f7752e2a384e11b0255d7eb1e
MD5 c4172edef326fd136d095e8dcc9604d8
SHA1 50969ba8713726b3cb0c70f88377476ecae69755
SHA512 62613aa4063e1ca6fad20970e4d19519c6fe85cfa1833f4d9752c1d40a31a21c95a216f4a4e06a260177b4d44b8896322cfaf169726ab626c8576db062c3fb81
SSDEEP 12288:Cmmzqzn6XBLwMr7RWxlwag70lrCKRB6QafM4Fyk9oa80cEQEvPBqkH6tc0Bpq0:2XFpuGT7yhRB6QX45XdQkz6cwq0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount TzSpecificLocalTimeToSystemTime GetVolumeInformationA WriteConsoleW GetSystemDirectoryA SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress GetConsoleAliasA LoadLibraryA LocalAlloc GetNumberFormatW CreateEventW RemoveDirectoryW GetModuleFileNameA BuildCommDCBA VirtualProtect PurgeComm SetFileAttributesW LoadLibraryExW IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection HeapFree ReadFile SetFilePointerEx DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleMode ReadConsoleW SetStdHandle FlushFileBuffers GetConsoleCP OutputDebugStringW GetStringTypeW CreateFileW CloseHandle SetEndOfFile

gdi32

GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

5eed1b7c0087418dfe4321bf9e31f07fb349e40f7752e2a384e11b0255d7eb1e

kernel32

gdi32

generic