e53309c5cb2113515bca71c3b4cb822d230f8ed16eecd741ba23c43884a13f99

General

Target
e53309c5cb2113515bca71c3b4cb822d230f8ed16eecd741ba23c43884a13f99
Size 457KB
Sample240614-aeeessxajf
SHA256 e53309c5cb2113515bca71c3b4cb822d230f8ed16eecd741ba23c43884a13f99
MD5 1dd4cd6304347c679d169ca2c78a75c3
SHA1 d7a3c3b9540e3e714b3b284b7f0c6cde9502d362
SHA512 56fe9eac130f475a1ed6349dd4401e0c37e5a67d13480caf6295234add5b0168e331af61dcab66037d9299a879e2b2b18bd8f36d1c79e6212a342fcc099f58c7
SSDEEP 6144:n5S+CVBM/fb/5SIsK4aok13mfnQNAXwc8gMSM6RvTjqzDeTwFb4T:n5S+gBAbh18p82f2A1MuRLjqzDeT9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e53309c5cb2113515bca71c3b4cb822d230f8ed16eecd741ba23c43884a13f99

File Explorer

e53309c5cb2113515bca71c3b4cb822d230f8ed16eecd741ba23c43884a13f99

.exe 457KB

e53309c5cb2113515bca71c3b4cb822d230f8ed16eecd741ba23c43884a13f99

IMPHASH 29a53497b5a6f1b99f896a8d199ea7f8
SHA256 e53309c5cb2113515bca71c3b4cb822d230f8ed16eecd741ba23c43884a13f99
MD5 1dd4cd6304347c679d169ca2c78a75c3
SHA1 d7a3c3b9540e3e714b3b284b7f0c6cde9502d362
SHA512 56fe9eac130f475a1ed6349dd4401e0c37e5a67d13480caf6295234add5b0168e331af61dcab66037d9299a879e2b2b18bd8f36d1c79e6212a342fcc099f58c7
SSDEEP 6144:n5S+CVBM/fb/5SIsK4aok13mfnQNAXwc8gMSM6RvTjqzDeTwFb4T:n5S+gBAbh18p82f2A1MuRLjqzDeT9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12499

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA IsBadStringPtrW PeekNamedPipe InterlockedCompareExchange SetComputerNameW GetTickCount GetNumberFormatA GetUserDefaultLangID TlsSetValue GlobalAlloc LoadLibraryW lstrcatA QueryInformationJobObject GetACP GetLastError SetLastError GetProcAddress SetFileAttributesA LoadLibraryA FindFirstVolumeMountPointW SetConsoleCtrlHandler GetDiskFreeSpaceA FoldStringW FoldStringA GetModuleFileNameA LoadLibraryExA BuildCommDCBA OutputDebugStringA GetWindowsDirectoryW WriteProcessMemory HeapFree EncodePointer DecodePointer HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapCreate WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection Sleep HeapSize GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapAlloc GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WriteConsoleW MultiByteToWideChar SetFilePointer SetStdHandle RtlUnwind GetCPInfo GetOEMCP IsValidCodePage CreateFileW CloseHandle GetStringTypeW RaiseException LCMapStringW IsProcessorFeaturePresent

Sharing

General

Malware Config

Signatures

File Explorer

e53309c5cb2113515bca71c3b4cb822d230f8ed16eecd741ba23c43884a13f99

kernel32

generic