55bfc4f6664eeab47ac132a9bebc81232c64ce420e44e1192cff4fdcacc91cae

General

Target
55bfc4f6664eeab47ac132a9bebc81232c64ce420e44e1192cff4fdcacc91cae
Size 350KB
Sample240529-p16hqsff65
SHA256 55bfc4f6664eeab47ac132a9bebc81232c64ce420e44e1192cff4fdcacc91cae
MD5 914e64cc166a58194817c112a6919c52
SHA1 ee00902c2e22797c3d08c237a6fe350c5a142031
SHA512 2b896d95baa3d4ae9ab52ab03ec81b602b54debdae9789e8ed3e0d91d3f336a49d293df5637438c6ea7094af83aef45765b970a29de7464605d62decab0218a4
SSDEEP 6144:E8i8e6PhdPBQ5WtErlFdlivZpQjrBIviyWK28numh:PHeYe5WelDoC1a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55bfc4f6664eeab47ac132a9bebc81232c64ce420e44e1192cff4fdcacc91cae

File Explorer

55bfc4f6664eeab47ac132a9bebc81232c64ce420e44e1192cff4fdcacc91cae

.exe 350KB

55bfc4f6664eeab47ac132a9bebc81232c64ce420e44e1192cff4fdcacc91cae

IMPHASH b3f7368a77856522320ff0e8d452c570
SHA256 55bfc4f6664eeab47ac132a9bebc81232c64ce420e44e1192cff4fdcacc91cae
MD5 914e64cc166a58194817c112a6919c52
SHA1 ee00902c2e22797c3d08c237a6fe350c5a142031
SHA512 2b896d95baa3d4ae9ab52ab03ec81b602b54debdae9789e8ed3e0d91d3f336a49d293df5637438c6ea7094af83aef45765b970a29de7464605d62decab0218a4
SSDEEP 6144:E8i8e6PhdPBQ5WtErlFdlivZpQjrBIviyWK28numh:PHeYe5WelDoC1a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalDeleteAtom TryEnterCriticalSection GetNumaProcessorNode InterlockedDecrement GetComputerNameW GetTimeFormatA GetModuleHandleW EnumTimeFormatsA ActivateActCtx ReadFileScatter WriteConsoleOutputA InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetConsoleAliasW GetModuleFileNameW SetConsoleTitleA GetConsoleAliasesW SetLastError GetProcAddress GetProcessHeaps LocalLock LoadLibraryA UnhandledExceptionFilter FreeEnvironmentStringsW BuildCommDCBA CompareStringA GetShortPathNameW GetFileInformationByHandle LocalFileTimeToFileTime MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

55bfc4f6664eeab47ac132a9bebc81232c64ce420e44e1192cff4fdcacc91cae

kernel32

generic