0f5bae947e7f1d88edbea521ebd44f9712a4cd63176b79258816d4135fae48fb

General

Target
0f5bae947e7f1d88edbea521ebd44f9712a4cd63176b79258816d4135fae48fb
Size 711KB
Sample240523-dc4tfsbc7t
SHA256 0f5bae947e7f1d88edbea521ebd44f9712a4cd63176b79258816d4135fae48fb
MD5 2fe74589699ad8b98b23c473414a5c6a
SHA1 84b1ab6c53ce76ca7c8710a3fc943f12c260adaa
SHA512 2a473345343ee3869687cdde79921f9c6c9300d65e14056ad63788dd2459883c65ada384d15f6cc66ff09763ac52703314efba8175acba90ba0f8623be5350b5
SSDEEP 12288:Q972r9a2oBGCKmQltAg2toQoB4YfxKogqv5MuY:Q9KrDmQDAghxKov5Z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5bae947e7f1d88edbea521ebd44f9712a4cd63176b79258816d4135fae48fb

File Explorer

0f5bae947e7f1d88edbea521ebd44f9712a4cd63176b79258816d4135fae48fb

.exe 711KB

0f5bae947e7f1d88edbea521ebd44f9712a4cd63176b79258816d4135fae48fb

IMPHASH 7ef26bd2cf09974678d15fc70d74d406
SHA256 0f5bae947e7f1d88edbea521ebd44f9712a4cd63176b79258816d4135fae48fb
MD5 2fe74589699ad8b98b23c473414a5c6a
SHA1 84b1ab6c53ce76ca7c8710a3fc943f12c260adaa
SHA512 2a473345343ee3869687cdde79921f9c6c9300d65e14056ad63788dd2459883c65ada384d15f6cc66ff09763ac52703314efba8175acba90ba0f8623be5350b5
SSDEEP 12288:Q972r9a2oBGCKmQltAg2toQoB4YfxKogqv5MuY:Q9KrDmQDAghxKov5Z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16007

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect GetLastError SetLastError GetThreadContext GetCommTimeouts GetTickCount CreateEventW LoadLibraryA LoadLibraryW LoadLibraryExA GetModuleFileNameA GetSystemDirectoryW RemoveDirectoryA CopyFileExW GetVolumeInformationW IsBadStringPtrA BuildCommDCBW SetComputerNameExA GetLocaleInfoA GetNumberFormatW WriteConsoleA WriteConsoleW AddConsoleAliasW GetStringTypeW OutputDebugStringW LocalAlloc SetFileAttributesW GetProcAddress EncodePointer DecodePointer IsProcessorFeaturePresent RaiseException RtlUnwind GetCommandLineW HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection CloseHandle ReadFile GetConsoleMode ReadConsoleW GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LCMapStringW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc SetStdHandle FlushFileBuffers GetConsoleCP SetFilePointerEx CreateFileW

user32

DdeFreeStringHandle

gdi32

GetCharWidthA GetCharABCWidthsI

Sharing

General

Malware Config

Signatures

File Explorer

0f5bae947e7f1d88edbea521ebd44f9712a4cd63176b79258816d4135fae48fb

kernel32

user32

gdi32

generic