5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25

General

Target
5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25
Size 369KB
Sample240528-fectvsgb62
SHA256 5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25
MD5 d13d52fa632b4c6606b7874fc6733e28
SHA1 091b649bdd1ee951face5c07adde64fe29838216
SHA512 17e0fc87f0d4d0024d210d267aa9aeadf1bbab40933fef040a19a34b7cb86d0fe93c61e060971e81209807ee4807236500194bf6aeb483cac4492a995af6c165
SSDEEP 6144:VST5HihCi8OLdnmSzu2f5JeEhNBlG7LTlcM:VGHni8OpnmSVe5VcM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25

File Explorer

5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25

.exe 369KB

5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25

IMPHASH 5041ecd93729a6f544de5cb68dce5db8
SHA256 5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25
MD5 d13d52fa632b4c6606b7874fc6733e28
SHA1 091b649bdd1ee951face5c07adde64fe29838216
SHA512 17e0fc87f0d4d0024d210d267aa9aeadf1bbab40933fef040a19a34b7cb86d0fe93c61e060971e81209807ee4807236500194bf6aeb483cac4492a995af6c165
SSDEEP 6144:VST5HihCi8OLdnmSzu2f5JeEhNBlG7LTlcM:VGHni8OpnmSVe5VcM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16343

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalAlloc GetLastError SetLastError SetThreadContext GetTickCount _lopen CreateEventW LoadLibraryA LoadLibraryExW GetModuleFileNameW GetModuleHandleA GetSystemDirectoryA CreateDirectoryA SetFileAttributesW GetVolumeInformationW GetProcAddress BuildCommDCBA CommConfigDialogW SetComputerNameExA SetInformationJobObject FindNextVolumeA SetVolumeMountPointA GetACP GetLocaleInfoA GetNumberFormatA GetStringTypeW SetConsoleCursorInfo AllocConsole AddConsoleAliasW CloseHandle WriteConsoleW SetFilePointerEx IsBadStringPtrA InterlockedExchange EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineW IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent LCMapStringW EnterCriticalSection LeaveCriticalSection IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc OutputDebugStringW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle CreateFileW

user32

GetSysColorBrush DdeKeepStringHandle

gdi32

GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25

kernel32

user32

gdi32

generic