24f5c159151931b663c63ce99e9b857074820ba4d69a8a1d9a8fb77c9bd74db7

General

Target
24f5c159151931b663c63ce99e9b857074820ba4d69a8a1d9a8fb77c9bd74db7
Size 378KB
Sample240619-hdf61awaph
SHA256 24f5c159151931b663c63ce99e9b857074820ba4d69a8a1d9a8fb77c9bd74db7
MD5 5a86450996839a458d1e078902facf34
SHA1 27492d9a848050c05d36b90646b96adb4a697fc1
SHA512 75acfcace9a5671e5b864c4c7a9e85e32d8555336ecdbfe362063af908cb72bb1f7097cb04e1e969e1a4f13b8650fa31de783e6688c5d0504c58d61b6aeec3b3
SSDEEP 6144:Gbb/n2uUiG4fmbkoac8xnKVGYLft/sQLwOK4MFJcH:4/nbX5ObUlx/WtUEi5F2H
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24f5c159151931b663c63ce99e9b857074820ba4d69a8a1d9a8fb77c9bd74db7

File Explorer

24f5c159151931b663c63ce99e9b857074820ba4d69a8a1d9a8fb77c9bd74db7

.exe 378KB

24f5c159151931b663c63ce99e9b857074820ba4d69a8a1d9a8fb77c9bd74db7

IMPHASH 34d2cb9d0b8ad746ecef93eebaa60ccb
SHA256 24f5c159151931b663c63ce99e9b857074820ba4d69a8a1d9a8fb77c9bd74db7
MD5 5a86450996839a458d1e078902facf34
SHA1 27492d9a848050c05d36b90646b96adb4a697fc1
SHA512 75acfcace9a5671e5b864c4c7a9e85e32d8555336ecdbfe362063af908cb72bb1f7097cb04e1e969e1a4f13b8650fa31de783e6688c5d0504c58d61b6aeec3b3
SSDEEP 6144:Gbb/n2uUiG4fmbkoac8xnKVGYLft/sQLwOK4MFJcH:4/nbX5ObUlx/WtUEi5F2H
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12219

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FindResourceA GlobalCompact GetCPInfo FindResourceW GetConsoleAliasA GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalAlloc GlobalFindAtomA LoadLibraryW AssignProcessToJobObject IsBadStringPtrA GetLastError SetLastError GetProcAddress SetFileAttributesA LoadLibraryA OpenMutexA InterlockedExchangeAdd CreateHardLinkW GetDiskFreeSpaceA EnumResourceTypesW FindFirstVolumeMountPointA LoadLibraryExA lstrcatW BuildCommDCBA OutputDebugStringA GetWindowsDirectoryW OpenFileMappingA WriteProcessMemory GetStringTypeW MultiByteToWideChar HeapFree GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW HeapAlloc HeapCreate InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind Sleep WideCharToMultiByte GetACP GetOEMCP IsValidCodePage HeapSize RaiseException HeapReAlloc IsProcessorFeaturePresent LCMapStringW

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

Sharing

General

Malware Config

Signatures

File Explorer

24f5c159151931b663c63ce99e9b857074820ba4d69a8a1d9a8fb77c9bd74db7

kernel32

user32

generic