3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c

General

Target
3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c
Size 393KB
Sample240530-lrr27sed63
SHA256 3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c
MD5 2c00487853a61f6767cd12af4af9df2a
SHA1 c720586be075d6f11df8a0ccf546b63faeaadc85
SHA512 5f5377e0a2633147b6af8936b640c542ac54cf36f13536a68d31d01c1019f4a70fce12137d01c6b59b8c44f75c6158d02f178465d6041f66642485b1b90911f5
SSDEEP 6144:O4WBTB9d+a4q8l54K8H7j+8sbQVACLRK6YuXndeHX:O4eTB9Wq8l5k2tQvRKb0n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c

File Explorer

3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c

.exe 393KB

3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c

IMPHASH 15aa08528829671bc5d93157e3a8d728
SHA256 3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c
MD5 2c00487853a61f6767cd12af4af9df2a
SHA1 c720586be075d6f11df8a0ccf546b63faeaadc85
SHA512 5f5377e0a2633147b6af8936b640c542ac54cf36f13536a68d31d01c1019f4a70fce12137d01c6b59b8c44f75c6158d02f178465d6041f66642485b1b90911f5
SSDEEP 6144:O4WBTB9d+a4q8l54K8H7j+8sbQVACLRK6YuXndeHX:O4eTB9Wq8l5k2tQvRKb0n
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LocalAlloc GetLastError SetLastError ReadProcessMemory GetTickCount _lopen OpenEventA LoadLibraryW LoadLibraryExA GetModuleFileNameW GetModuleHandleA GetSystemDirectoryW CreateDirectoryW SetFileAttributesW GetVolumeInformationW IsBadStringPtrA BuildCommDCBA SetComputerNameA SetInformationJobObject FindNextVolumeA FindNextVolumeMountPointW GetOEMCP GetCalendarInfoA GetNumberFormatA GetStringTypeA SetConsoleCursorInfo SetConsoleWindowInfo AddConsoleAliasW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent LCMapStringW EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetACP GetCPInfo HeapReAlloc OutputDebugStringW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode CreateFileW

user32

GetSysColorBrush SetMenu DdeFreeStringHandle

Sharing

General

Malware Config

Signatures

File Explorer

3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c

kernel32

user32

generic