7a4a50031176261042fb264037a5a4d7001b1b35eaed76742e4285e530c79e20

General

Target
7a4a50031176261042fb264037a5a4d7001b1b35eaed76742e4285e530c79e20
Size 636KB
Sample240616-13p5bazgra
SHA256 7a4a50031176261042fb264037a5a4d7001b1b35eaed76742e4285e530c79e20
MD5 2b1fbae54b0b4c8a075f7534bc362c66
SHA1 f3c7cbcbde22f374364f7279e4fda5d9ab75327f
SHA512 c8c3af64e00edb7692d8053450ed2974769f14c795242d65f1d18479b514bbe7999719f5dc0d6b4b58cdc886438bac823553d81cb65df1843c40f38c6b382000
SSDEEP 12288:jgalLWTnoNPi1PLegCu5tXVOKw9UWstOPlHODgSEEoFm7:hZanfjeru5tXyUWsYPlHOTEE9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a4a50031176261042fb264037a5a4d7001b1b35eaed76742e4285e530c79e20

File Explorer

7a4a50031176261042fb264037a5a4d7001b1b35eaed76742e4285e530c79e20

.exe 636KB

7a4a50031176261042fb264037a5a4d7001b1b35eaed76742e4285e530c79e20

IMPHASH a8e793a691fca3c74822fd515540971c
SHA256 7a4a50031176261042fb264037a5a4d7001b1b35eaed76742e4285e530c79e20
MD5 2b1fbae54b0b4c8a075f7534bc362c66
SHA1 f3c7cbcbde22f374364f7279e4fda5d9ab75327f
SHA512 c8c3af64e00edb7692d8053450ed2974769f14c795242d65f1d18479b514bbe7999719f5dc0d6b4b58cdc886438bac823553d81cb65df1843c40f38c6b382000
SSDEEP 12288:jgalLWTnoNPi1PLegCu5tXVOKw9UWstOPlHODgSEEoFm7:hZanfjeru5tXyUWsYPlHOTEE9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6364

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA GetConsoleAliasesLengthW GetNumaProcessorNode GetStringTypeA InterlockedDecrement CreateJobObjectW SetVolumeMountPointW SetCommBreak GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesA GlobalAlloc LoadLibraryW GetLocaleInfoW FormatMessageW WriteConsoleOutputA lstrcpynW GetTimeFormatW LocalReAlloc GetModuleFileNameW SetVolumeLabelA CreateJobObjectA GetNamedPipeHandleStateW SetLastError GetThreadLocale GetProcAddress LoadLibraryA WriteConsoleA UnhandledExceptionFilter SetCalendarInfoW SetFileApisToANSI OpenJobObjectW FindAtomA SetConsoleTitleW lstrcatW OpenFileMappingW BuildCommDCBA GlobalAddAtomW FindNextVolumeA LocalFileTimeToFileTime GetModuleHandleA GetStringTypeExA UnregisterWait GetLastError HeapFree HeapAlloc HeapReAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA HeapSize FlushFileBuffers CreateFileA CloseHandle RaiseException

user32

LoadIconW

advapi32

QueryServiceLockStatusW

Sharing

General

Malware Config

Signatures

File Explorer

7a4a50031176261042fb264037a5a4d7001b1b35eaed76742e4285e530c79e20

kernel32

user32

advapi32

generic