5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a

General

Target
5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a
Size 274KB
Sample240531-tklwlsde4z
SHA256 5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a
MD5 e6afb008d2bfe15fc36ac13f265d9f51
SHA1 f5dfa57d00cbd0f28cf1e72b53bec6013a328307
SHA512 f2e129945aa3d8d83f108beca8750294b167ef185eccf90f6ec8da66d92a2c6c1fce76c610829adcc9cbc86ea9d7ea219ff55cd1d1725e13368f15579eb51128
SSDEEP 3072:5JTYR7i5nxPirONLMd3H1kxnu3Y+cOqr5wDs9Ts99/IYE:5qBenxwULxxns/+aE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a

File Explorer

5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a

.exe 274KB

5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a

IMPHASH 352086de05af81674b561dddbf8f1c07
SHA256 5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a
MD5 e6afb008d2bfe15fc36ac13f265d9f51
SHA1 f5dfa57d00cbd0f28cf1e72b53bec6013a328307
SHA512 f2e129945aa3d8d83f108beca8750294b167ef185eccf90f6ec8da66d92a2c6c1fce76c610829adcc9cbc86ea9d7ea219ff55cd1d1725e13368f15579eb51128
SSDEEP 3072:5JTYR7i5nxPirONLMd3H1kxnu3Y+cOqr5wDs9Ts99/IYE:5qBenxwULxxns/+aE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4683

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement ZombifyActCtx GetComputerNameW GetTimeFormatA GetModuleHandleW EnumTimeFormatsW WriteConsoleOutputA InterlockedPopEntrySList SetConsoleMode GetConsoleAliasW GetFileAttributesW GetModuleFileNameW GetShortPathNameA GetConsoleAliasesW TryEnterCriticalSection GetProcAddress GetLongPathNameA BackupWrite LocalLock LoadLibraryA UnhandledExceptionFilter HeapLock SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA CompareStringA FileTimeToLocalFileTime GetFileInformationByHandle SetLastError GlobalDeleteAtom GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

advapi32

OpenThreadToken

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a

kernel32

advapi32

winhttp

generic