af8b7097ef6885e790b4d8bc06e51c99572e939b49ed8e31135d58da14b4117d

General

Target
af8b7097ef6885e790b4d8bc06e51c99572e939b49ed8e31135d58da14b4117d
Size 732KB
Sample240526-kel5radc54
SHA256 af8b7097ef6885e790b4d8bc06e51c99572e939b49ed8e31135d58da14b4117d
MD5 193f694e6a67100c6b996f04ac809a0a
SHA1 58790a163d99e9dc5ed5705cd448de5408587c04
SHA512 4ec5c02989386764befc98e42dc1afbb1c6a7cba450f87c44bea34dd52e1fa8542575456f165a4a52faa96156f12e0326a2d5dfe80977584f1f744b87bc079bc
SSDEEP 12288:6SPKciw2C0t1khB740hcNhHaDQufywx6yWBjGZT9wp/NFSd9JJMHC31ziIK:6SicqEx40hcNIf9xravpKdjJX3AIK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af8b7097ef6885e790b4d8bc06e51c99572e939b49ed8e31135d58da14b4117d

File Explorer

af8b7097ef6885e790b4d8bc06e51c99572e939b49ed8e31135d58da14b4117d

.exe 732KB

af8b7097ef6885e790b4d8bc06e51c99572e939b49ed8e31135d58da14b4117d

IMPHASH bb5f3ed28b8c368d81cb06a1479586da
SHA256 af8b7097ef6885e790b4d8bc06e51c99572e939b49ed8e31135d58da14b4117d
MD5 193f694e6a67100c6b996f04ac809a0a
SHA1 58790a163d99e9dc5ed5705cd448de5408587c04
SHA512 4ec5c02989386764befc98e42dc1afbb1c6a7cba450f87c44bea34dd52e1fa8542575456f165a4a52faa96156f12e0326a2d5dfe80977584f1f744b87bc079bc
SSDEEP 12288:6SPKciw2C0t1khB740hcNhHaDQufywx6yWBjGZT9wp/NFSd9JJMHC31ziIK:6SicqEx40hcNIf9xravpKdjJX3AIK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LocalAlloc GetLastError SetLastError GetThreadContext GetTickCount CreateEventA LoadLibraryA LoadLibraryW LoadLibraryExW GetModuleFileNameW GetSystemDirectoryA GetTempPathA CreateDirectoryW SetFileAttributesW GetVolumeInformationA BuildCommDCBW CommConfigDialogW SetComputerNameExW VerifyVersionInfoW IsProcessInJob SetVolumeMountPointW GetLocaleInfoW GetNumberFormatW GetStringTypeW SetConsoleCursorInfo AllocConsole WriteConsoleW AddConsoleAliasA OutputDebugStringW GetConsoleCP FlushFileBuffers IsBadStringPtrA InterlockedExchange EncodePointer DecodePointer ReadFile RaiseException RtlUnwind GetCommandLineW IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection CloseHandle SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetCurrentThreadId GetProcessHeap WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LCMapStringW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc SetStdHandle CreateFileW

user32

GetSysColorBrush DdeFreeStringHandle

gdi32

GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

af8b7097ef6885e790b4d8bc06e51c99572e939b49ed8e31135d58da14b4117d

kernel32

user32

gdi32

generic