52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846

General

Target
52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846
Size 383KB
Sample240613-2vlycsxfrk
SHA256 52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846
MD5 7de31fc78c7447177a68f344d0d87a05
SHA1 617a4bfcbe399c14546b6793b334d76d030a4169
SHA512 c199d74b98a185307d16ace020047eac60c3acbf46824bdff3fe9cef3aca4b0c524810c40c9530df4940304f9de23d09d2aaa7169a01425bffa872345bc7ba20
SSDEEP 6144:nTQ49PRTUflbP+3nJkT6rRYkGsJA/JDSy0oJwPIDzDeTEFb4T:nTQ4f6PWR+kdJA0GJwPIDzDeTx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846

File Explorer

52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846

.exe 383KB

52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846

IMPHASH 11dda132cb28ca3ceb49be1c64c9c2c5
SHA256 52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846
MD5 7de31fc78c7447177a68f344d0d87a05
SHA1 617a4bfcbe399c14546b6793b334d76d030a4169
SHA512 c199d74b98a185307d16ace020047eac60c3acbf46824bdff3fe9cef3aca4b0c524810c40c9530df4940304f9de23d09d2aaa7169a01425bffa872345bc7ba20
SSDEEP 6144:nTQ49PRTUflbP+3nJkT6rRYkGsJA/JDSy0oJwPIDzDeTEFb4T:nTQ4f6PWR+kdJA0GJwPIDzDeTx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe TlsGetValue InterlockedCompareExchange SetComputerNameW OutputDebugStringW GetTickCount GetNumberFormatA GetUserDefaultLangID GlobalAlloc LoadLibraryW lstrcatA QueryInformationJobObject GetACP IsBadStringPtrA GetLastError SetLastError GetProcAddress BuildCommDCBW GetDiskFreeSpaceW LoadLibraryA FindFirstVolumeMountPointW SetConsoleCtrlHandler FoldStringW GetModuleFileNameA LoadLibraryExA GetWindowsDirectoryW WriteProcessMemory HeapFree EncodePointer DecodePointer HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapCreate WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection Sleep HeapSize GetModuleHandleW ExitProcess TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapAlloc SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess WriteConsoleW MultiByteToWideChar SetFilePointer SetStdHandle RtlUnwind GetCPInfo GetOEMCP IsValidCodePage CreateFileW CloseHandle GetStringTypeW LCMapStringW IsProcessorFeaturePresent

Sharing

General

Malware Config

Signatures

File Explorer

52c29eb5cbbf00294513eb3533879b80e4bff71e52ccddd47ea08c5fcf2b3846

kernel32

generic