cef01416f16ed9f06cf10371795313621ac7eab419c16a508fd144151d9794f1

General

Target
cef01416f16ed9f06cf10371795313621ac7eab419c16a508fd144151d9794f1
Size 1.4MB
Sample240613-qwpvvs1crc
SHA256 cef01416f16ed9f06cf10371795313621ac7eab419c16a508fd144151d9794f1
MD5 ec074d3f8fb3a1db68967bf2913eee10
SHA1 08fcfd5ceecbf94c97e56391d291418a9b20a922
SHA512 cd0962f82a8c003682766a348cc5178aee941164f249a84641f8efa65b73873031b1939297a708a149ac3e747ca2887fa70c5c53df00892710824721b4b5667d
SSDEEP 24576:S7zNkhm5PBX8sqjnhMgeiCl7G0nehbGZpbD:aNEm5ZXoDmg27RnWGj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef01416f16ed9f06cf10371795313621ac7eab419c16a508fd144151d9794f1

File Explorer

cef01416f16ed9f06cf10371795313621ac7eab419c16a508fd144151d9794f1

.exe 1.4MB

cef01416f16ed9f06cf10371795313621ac7eab419c16a508fd144151d9794f1

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 cef01416f16ed9f06cf10371795313621ac7eab419c16a508fd144151d9794f1
MD5 ec074d3f8fb3a1db68967bf2913eee10
SHA1 08fcfd5ceecbf94c97e56391d291418a9b20a922
SHA512 cd0962f82a8c003682766a348cc5178aee941164f249a84641f8efa65b73873031b1939297a708a149ac3e747ca2887fa70c5c53df00892710824721b4b5667d
SSDEEP 24576:S7zNkhm5PBX8sqjnhMgeiCl7G0nehbGZpbD:aNEm5ZXoDmg27RnWGj
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

46610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

cef01416f16ed9f06cf10371795313621ac7eab419c16a508fd144151d9794f1

kernel32

ole32

generic