a15f6e5ac088869e8172bd8387e5bc50d4ccc993e87389bc6daed56035fcaf6d

General

Target
a15f6e5ac088869e8172bd8387e5bc50d4ccc993e87389bc6daed56035fcaf6d
Size 334KB
Sample240607-a1mnasee8t
SHA256 a15f6e5ac088869e8172bd8387e5bc50d4ccc993e87389bc6daed56035fcaf6d
MD5 8a1e22076ec74ab94c8dd1c87d5e3caa
SHA1 964bc2eed2dcaac7a892229ce3a4f220a5a7e4bb
SHA512 e0e7b936787f34ec9d24ca3a48bc30543608d8247db3820d89741ef605ce1fa85f6af2d10f6f2ce0b6c9ca1d064b45d041c6f176391a884480387ee9b2232690
SSDEEP 6144:ILl8i3/10SilbuDI3P/48Mp7q9YERefeSzGsXA:IJb/14bJ3PAjBZSK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a15f6e5ac088869e8172bd8387e5bc50d4ccc993e87389bc6daed56035fcaf6d

File Explorer

a15f6e5ac088869e8172bd8387e5bc50d4ccc993e87389bc6daed56035fcaf6d

.exe 334KB

a15f6e5ac088869e8172bd8387e5bc50d4ccc993e87389bc6daed56035fcaf6d

IMPHASH f63794d2e4f1d613bcbd39542bded67f
SHA256 a15f6e5ac088869e8172bd8387e5bc50d4ccc993e87389bc6daed56035fcaf6d
MD5 8a1e22076ec74ab94c8dd1c87d5e3caa
SHA1 964bc2eed2dcaac7a892229ce3a4f220a5a7e4bb
SHA512 e0e7b936787f34ec9d24ca3a48bc30543608d8247db3820d89741ef605ce1fa85f6af2d10f6f2ce0b6c9ca1d064b45d041c6f176391a884480387ee9b2232690
SSDEEP 6144:ILl8i3/10SilbuDI3P/48Mp7q9YERefeSzGsXA:IJb/14bJ3PAjBZSK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6487

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTimeFormatA FreeEnvironmentStringsA GetModuleHandleW FormatMessageW GetStringTypeExW GetFileAttributesA GetConsoleAliasW WritePrivateProfileStringW GetConsoleAliasesW SetLastError GetProcAddress FindVolumeMountPointClose BuildCommDCBW GetComputerNameW LocalAlloc SetConsoleOutputCP ConvertDefaultLocale GetModuleFileNameA EnumDateFormatsA SetConsoleTitleW GetProcessAffinityMask CompareStringA DeleteCriticalSection GetShortPathNameW OpenFileMappingA LocalFileTimeToFileTime WriteConsoleOutputW InterlockedDecrement LoadLibraryA GlobalDeleteAtom HeapAlloc GetLastError HeapReAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapSize GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

gdi32

GetCharWidth32W

advapi32

DuplicateToken

Sharing

General

Malware Config

Signatures

File Explorer

a15f6e5ac088869e8172bd8387e5bc50d4ccc993e87389bc6daed56035fcaf6d

kernel32

gdi32

advapi32

generic