49d95fac7f3b43346606b9baf069d690b6b70458538646ffc70179ff19dfb3c7

General

Target
49d95fac7f3b43346606b9baf069d690b6b70458538646ffc70179ff19dfb3c7
Size 329KB
Sample240529-hynftafc96
SHA256 49d95fac7f3b43346606b9baf069d690b6b70458538646ffc70179ff19dfb3c7
MD5 9ff15ec14128636b184e8e6acb5d28d6
SHA1 e0361d1db998c9def637119a3f8c6b5c02f36512
SHA512 ff890c0a0fa4a13414c5dd6ec7c71cfde63385cf79759af824aeb779e22ecb039d7727599f5b7373695496acd9967302f8579fa18a7017d94d39cfd47783fb52
SSDEEP 6144:ZOMYg52+e781ZJ5W3L8jxcKHoBOK8hbzhHy+CA/dLd:ZOMe7Q5W3AHoBSFhS+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d95fac7f3b43346606b9baf069d690b6b70458538646ffc70179ff19dfb3c7

File Explorer

49d95fac7f3b43346606b9baf069d690b6b70458538646ffc70179ff19dfb3c7

.exe 329KB

49d95fac7f3b43346606b9baf069d690b6b70458538646ffc70179ff19dfb3c7

IMPHASH f73751c7558a6233411df91bbe76d0b3
SHA256 49d95fac7f3b43346606b9baf069d690b6b70458538646ffc70179ff19dfb3c7
MD5 9ff15ec14128636b184e8e6acb5d28d6
SHA1 e0361d1db998c9def637119a3f8c6b5c02f36512
SHA512 ff890c0a0fa4a13414c5dd6ec7c71cfde63385cf79759af824aeb779e22ecb039d7727599f5b7373695496acd9967302f8579fa18a7017d94d39cfd47783fb52
SSDEEP 6144:ZOMYg52+e781ZJ5W3L8jxcKHoBOK8hbzhHy+CA/dLd:ZOMe7Q5W3AHoBSFhS+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9029

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SleepEx FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesA GetConsoleAliasesLengthA EnumTimeFormatsW ActivateActCtx ReadFileScatter WriteConsoleOutputA InitAtomTable SetConsoleMode GetFileAttributesW FileTimeToSystemTime RaiseException InterlockedExchange SetLastError GetProcAddress GetProcessHeaps LoadLibraryA UnhandledExceptionFilter LocalAlloc GetModuleFileNameA SetConsoleTitleW BuildCommDCBA CompareStringA DeleteCriticalSection GetShortPathNameW SetCalendarInfoA InterlockedPushEntrySList GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

49d95fac7f3b43346606b9baf069d690b6b70458538646ffc70179ff19dfb3c7

kernel32

generic