914f74e19d0a6b1501f2942ddd8eb78ed51ffd25da203c779ee05591dbb9b0b1

General

Target
914f74e19d0a6b1501f2942ddd8eb78ed51ffd25da203c779ee05591dbb9b0b1
Size 11.5MB
Sample240522-lc2yvsae47
SHA256 914f74e19d0a6b1501f2942ddd8eb78ed51ffd25da203c779ee05591dbb9b0b1
MD5 342973c7facd1fbbfbfdae4e873dc4a0
SHA1 782bdc0091de61f185e018b7b7756b95e0233b91
SHA512 a7348615c23e18a48decbfda93e9a7b8862abf680bafdfff8daf558ae64567b431ee1cac4f05a044e9703a513a77e8dff9ef42f0d135efe7d03cb2aaa96cea15
SSDEEP 6144:5S8dp/oVs7UHb+KCmkxdUtCEUiiqpL3ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZv:IgAVwUHbNKdZPqN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
914f74e19d0a6b1501f2942ddd8eb78ed51ffd25da203c779ee05591dbb9b0b1

File Explorer

914f74e19d0a6b1501f2942ddd8eb78ed51ffd25da203c779ee05591dbb9b0b1

.exe 11.5MB

914f74e19d0a6b1501f2942ddd8eb78ed51ffd25da203c779ee05591dbb9b0b1

IMPHASH 36da5bb4dfd8ed791010d83958f8dea5
SHA256 914f74e19d0a6b1501f2942ddd8eb78ed51ffd25da203c779ee05591dbb9b0b1
MD5 342973c7facd1fbbfbfdae4e873dc4a0
SHA1 782bdc0091de61f185e018b7b7756b95e0233b91
SHA512 a7348615c23e18a48decbfda93e9a7b8862abf680bafdfff8daf558ae64567b431ee1cac4f05a044e9703a513a77e8dff9ef42f0d135efe7d03cb2aaa96cea15
SSDEEP 6144:5S8dp/oVs7UHb+KCmkxdUtCEUiiqpL3ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZv:IgAVwUHbNKdZPqN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

25992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetConsoleAliasesLengthW MoveFileExA BuildCommDCBAndTimeoutsA DeleteVolumeMountPointA InterlockedIncrement GetConsoleAliasA SetDefaultCommConfigW GetProfileStringW SetComputerNameW GetComputerNameW FlushConsoleInputBuffer OpenSemaphoreA BackupSeek FreeEnvironmentStringsA _lclose _lcreat GetModuleHandleW CreateNamedPipeW GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA OpenProcess GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetTimeFormatW TerminateProcess GetOverlappedResult GetShortPathNameA GetNamedPipeHandleStateW GetPrivateProfileIntW GetStartupInfoA GetLastError SetLastError GetProcAddress HeapSize _hwrite OpenWaitableTimerA MoveFileA SetConsoleCtrlHandler GetPrivateProfileStructA FindNextFileA GetModuleHandleA UpdateResourceW FreeEnvironmentStringsW CreateMailslotA GetStringTypeW GetCurrentDirectoryA FatalAppExitA GetShortPathNameW SetFileShortNameA ReadConsoleInputW GetVersion FindFirstVolumeW DeleteFileW CloseHandle ReadFile WriteConsoleW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc WideCharToMultiByte MultiByteToWideChar HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree RtlUnwind SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW HeapCreate SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringW CreateFileW

user32

CharUpperA CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

914f74e19d0a6b1501f2942ddd8eb78ed51ffd25da203c779ee05591dbb9b0b1

kernel32

user32

generic