521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af

General

Target
521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af
Size 425KB
Sample240530-2whmbsch6s
SHA256 521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af
MD5 8994ce395c7684a1585cac0dfdd534c7
SHA1 9110bef52f830a1ae29e03d8f632b8c17a7638e8
SHA512 db3f111a9921cec82288db44cd1d92bf5fd53f1f8db0d0bbf2209aebf77c125683c012233af41efdaf7b402b37fd0d0323be3f3d42bdc0e33b2420b446d21d9a
SSDEEP 6144:rME9z9UF+Dobt8wfkBNQ2joThCqxfB+XXTbKVXnda:oE9zOUsx0QACYqxfgXXYn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af

File Explorer

521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af

.exe 425KB

521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af

IMPHASH 5608b5e25a7505b4514f9e0627e29ef5
SHA256 521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af
MD5 8994ce395c7684a1585cac0dfdd534c7
SHA1 9110bef52f830a1ae29e03d8f632b8c17a7638e8
SHA512 db3f111a9921cec82288db44cd1d92bf5fd53f1f8db0d0bbf2209aebf77c125683c012233af41efdaf7b402b37fd0d0323be3f3d42bdc0e33b2420b446d21d9a
SSDEEP 6144:rME9z9UF+Dobt8wfkBNQ2joThCqxfB+XXTbKVXnda:oE9zOUsx0QACYqxfgXXYn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError SetLastError ReadProcessMemory _lopen OpenEventA LoadLibraryA LoadLibraryExW GetModuleFileNameA GetModuleHandleA GetSystemDirectoryW CreateDirectoryW SetFileAttributesW GetVolumeInformationW LocalAlloc BuildCommDCBA SetComputerNameA SetInformationJobObject FindNextVolumeMountPointW GetOEMCP GetCalendarInfoA GetNumberFormatA GetStringTypeA SetConsoleCursorInfo SetConsoleWindowInfo AddConsoleAliasA ReadConsoleW ReadFile SetEndOfFile WriteConsoleW IsBadStringPtrW GetProcAddress WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer HeapFree RaiseException RtlUnwind GetCommandLineA GetCPInfo HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize GetProcessHeap IsDebuggerPresent GetCurrentThreadId GetStdHandle GetFileType WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetACP HeapReAlloc OutputDebugStringW GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers CreateFileW CloseHandle SetStdHandle

user32

GetSysColorBrush GetMenu DdeCmpStringHandles

advapi32

ClearEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

521b7402c7da670b91919740676bd50728f9f615c1e404a57120bf5dac6f25af

kernel32

user32

advapi32

generic