194c256ee34b7f4fe7f124c2730f6a7e1013b08cba21445a6d91fe35b181f0fa

General

Target
194c256ee34b7f4fe7f124c2730f6a7e1013b08cba21445a6d91fe35b181f0fa
Size 345KB
Sample240527-3mrdjsec61
SHA256 194c256ee34b7f4fe7f124c2730f6a7e1013b08cba21445a6d91fe35b181f0fa
MD5 ec8d9521789d53fae1fae2ff88c62ab9
SHA1 6ce8f5bba9cf0582d34e2ccc7799e61dfcd07adc
SHA512 6ce27af0530a9bb2a8e904d2606411341d3c8350d77c6def5f8a7f3e5b87ae9d51f26cf0d5da42e359778934c06a252e897605f0b3f1d787afbf4c6c3cbc94e4
SSDEEP 3072:pOLHAZA3WPt3MmjO36DRJu46JVxsu+cRDj9RbEvBhj9370taV7du45evwu/e:pO0Amtcmj+vBb+c1BV+B19370tcooUe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
194c256ee34b7f4fe7f124c2730f6a7e1013b08cba21445a6d91fe35b181f0fa

File Explorer

194c256ee34b7f4fe7f124c2730f6a7e1013b08cba21445a6d91fe35b181f0fa

.exe 345KB

194c256ee34b7f4fe7f124c2730f6a7e1013b08cba21445a6d91fe35b181f0fa

IMPHASH 3f8d22a10af8da5ae4cffa5656e4d83b
SHA256 194c256ee34b7f4fe7f124c2730f6a7e1013b08cba21445a6d91fe35b181f0fa
MD5 ec8d9521789d53fae1fae2ff88c62ab9
SHA1 6ce8f5bba9cf0582d34e2ccc7799e61dfcd07adc
SHA512 6ce27af0530a9bb2a8e904d2606411341d3c8350d77c6def5f8a7f3e5b87ae9d51f26cf0d5da42e359778934c06a252e897605f0b3f1d787afbf4c6c3cbc94e4
SSDEEP 3072:pOLHAZA3WPt3MmjO36DRJu46JVxsu+cRDj9RbEvBhj9370taV7du45evwu/e:pO0Amtcmj+vBb+c1BV+B19370tcooUe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA GlobalDeleteAtom InterlockedDecrement GetModuleHandleW GetConsoleAliasesLengthA EnumTimeFormatsA ReadFileScatter WriteConsoleOutputA InterlockedPopEntrySList GetFileAttributesA SetConsoleMode LocalReAlloc GetModuleFileNameW CompareStringW SetConsoleTitleA RaiseException GetConsoleAliasesW SetLastError GetProcAddress GetProcessHeaps BuildCommDCBW LoadLibraryA UnhandledExceptionFilter FreeEnvironmentStringsW DeleteCriticalSection GetShortPathNameW SetCalendarInfoA LocalFileTimeToFileTime GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

194c256ee34b7f4fe7f124c2730f6a7e1013b08cba21445a6d91fe35b181f0fa

kernel32

generic