1ee4be859ed464c1db54e88cb1918c30300c3befca972b572d088ae651b1f7f3

General

Target
1ee4be859ed464c1db54e88cb1918c30300c3befca972b572d088ae651b1f7f3
Size 259KB
Sample240526-ytzahsbb96
SHA256 1ee4be859ed464c1db54e88cb1918c30300c3befca972b572d088ae651b1f7f3
MD5 6f576545cfe2f6af887a7ea63d214fd7
SHA1 7c772ac439a4b8ef41d4ab5c901b731754240ed0
SHA512 3bccd4d3765ae4e6ab2df3624aa4c04695314bf7cf17f268cbbdab47a4cf5fbbbaa5d1e72a9f4b512ab7c9d55c0ec9a6a51f934afe1689b803a08b0531340564
SSDEEP 6144:+xXaLsZUTgiNY+zX/ho4LLSAaA9LAbonFnb7LWT:2amizPhFHSUMbUta
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ee4be859ed464c1db54e88cb1918c30300c3befca972b572d088ae651b1f7f3

File Explorer

1ee4be859ed464c1db54e88cb1918c30300c3befca972b572d088ae651b1f7f3

.exe 259KB

1ee4be859ed464c1db54e88cb1918c30300c3befca972b572d088ae651b1f7f3

IMPHASH 11167f714f9ffdb67294d15d97541d5b
SHA256 1ee4be859ed464c1db54e88cb1918c30300c3befca972b572d088ae651b1f7f3
MD5 6f576545cfe2f6af887a7ea63d214fd7
SHA1 7c772ac439a4b8ef41d4ab5c901b731754240ed0
SHA512 3bccd4d3765ae4e6ab2df3624aa4c04695314bf7cf17f268cbbdab47a4cf5fbbbaa5d1e72a9f4b512ab7c9d55c0ec9a6a51f934afe1689b803a08b0531340564
SSDEEP 6144:+xXaLsZUTgiNY+zX/ho4LLSAaA9LAbonFnb7LWT:2amizPhFHSUMbUta
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16407

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalAlloc GetLastError SetLastError GetThreadContext GetTickCount CreateEventA LoadLibraryA LoadLibraryExW GetModuleFileNameW GetSystemDirectoryA GetTempPathA CreateDirectoryW SetFileAttributesA GetVolumeInformationW IsBadStringPtrA GetProcAddress CommConfigDialogW SetComputerNameExW VerifyVersionInfoA IsProcessInJob FindFirstVolumeA SetVolumeMountPointA GetACP GetLocaleInfoW GetNumberFormatA GetStringTypeW SetConsoleCursorInfo AllocConsole AddConsoleAliasW CloseHandle WriteConsoleW SetFilePointerEx BuildCommDCBW InterlockedExchange EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineW IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent LCMapStringW EnterCriticalSection LeaveCriticalSection IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc OutputDebugStringW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle CreateFileW

user32

GetSysColorBrush DdeFreeStringHandle

gdi32

GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

1ee4be859ed464c1db54e88cb1918c30300c3befca972b572d088ae651b1f7f3

kernel32

user32

gdi32

generic