9d5c20e8ba2953e6d70e694d537d5f1ff5a0b6fd0adc88f48a087eccc8f91a51

General

Target
9d5c20e8ba2953e6d70e694d537d5f1ff5a0b6fd0adc88f48a087eccc8f91a51
Size 472KB
Sample240524-bajpdsfd2t
SHA256 9d5c20e8ba2953e6d70e694d537d5f1ff5a0b6fd0adc88f48a087eccc8f91a51
MD5 5e0db960120e6c67ccbc0b8a2cdaf6a7
SHA1 3b74573b5304f7c537f41e8827256bcf06d57953
SHA512 96049128d06b3307a08f6b6b3afa664ab8b7850975e458c606e1d901ef79fe4fcdd566c68dbbdc58c4009b76959297345f66c6db6f913dfe88adfc44b5316264
SSDEEP 12288:CxpIXPTj/kUR24H+GlAGEyQWzt6ABi/LzK:aCrjz24hu/yt64+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d5c20e8ba2953e6d70e694d537d5f1ff5a0b6fd0adc88f48a087eccc8f91a51

File Explorer

9d5c20e8ba2953e6d70e694d537d5f1ff5a0b6fd0adc88f48a087eccc8f91a51

.exe 472KB

9d5c20e8ba2953e6d70e694d537d5f1ff5a0b6fd0adc88f48a087eccc8f91a51

IMPHASH b4e1cac06a779908e443e0eb144d8b7e
SHA256 9d5c20e8ba2953e6d70e694d537d5f1ff5a0b6fd0adc88f48a087eccc8f91a51
MD5 5e0db960120e6c67ccbc0b8a2cdaf6a7
SHA1 3b74573b5304f7c537f41e8827256bcf06d57953
SHA512 96049128d06b3307a08f6b6b3afa664ab8b7850975e458c606e1d901ef79fe4fcdd566c68dbbdc58c4009b76959297345f66c6db6f913dfe88adfc44b5316264
SSDEEP 12288:CxpIXPTj/kUR24H+GlAGEyQWzt6ABi/LzK:aCrjz24hu/yt64+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

26093

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject CreateThread VirtualAlloc GetModuleHandleA GetProcAddress EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LCMapStringEx GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess TerminateProcess CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

9d5c20e8ba2953e6d70e694d537d5f1ff5a0b6fd0adc88f48a087eccc8f91a51

kernel32

generic