cb5a0d461b5a3b743512012fad2824c2c240ef469cf8c10bcfa647fe0c24e821

General

Target
cb5a0d461b5a3b743512012fad2824c2c240ef469cf8c10bcfa647fe0c24e821
Size 418KB
Sample240619-yb8q8sshjl
SHA256 cb5a0d461b5a3b743512012fad2824c2c240ef469cf8c10bcfa647fe0c24e821
MD5 e17d585a0eced5c95e2701fdfc4fefd5
SHA1 517e9808fc160c9f894ce5b65df84b42c9ca97d1
SHA512 c628fa8c10b5e3b9892bf4ebe7671ca7cf5cbee8637961addc7ba884bd9c410cf96222b3f9c52a4bc7432f79fcdadbd867d487cecaeb39be1018d304a78710a6
SSDEEP 12288:2nvoAoALor4lTuqJKeYwT5NkZ/vsNdXH:YLLorOTPKeYwlNQEPX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb5a0d461b5a3b743512012fad2824c2c240ef469cf8c10bcfa647fe0c24e821

File Explorer

cb5a0d461b5a3b743512012fad2824c2c240ef469cf8c10bcfa647fe0c24e821

.exe 418KB

cb5a0d461b5a3b743512012fad2824c2c240ef469cf8c10bcfa647fe0c24e821

IMPHASH 4dbf6d5dc26b4cec659971ecb90a1590
SHA256 cb5a0d461b5a3b743512012fad2824c2c240ef469cf8c10bcfa647fe0c24e821
MD5 e17d585a0eced5c95e2701fdfc4fefd5
SHA1 517e9808fc160c9f894ce5b65df84b42c9ca97d1
SHA512 c628fa8c10b5e3b9892bf4ebe7671ca7cf5cbee8637961addc7ba884bd9c410cf96222b3f9c52a4bc7432f79fcdadbd867d487cecaeb39be1018d304a78710a6
SSDEEP 12288:2nvoAoALor4lTuqJKeYwT5NkZ/vsNdXH:YLLorOTPKeYwlNQEPX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FindResourceA GlobalCompact GetCPInfo FindResourceW CreateHardLinkA GetSystemDefaultLCID OutputDebugStringW GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GlobalAlloc GlobalFindAtomA LoadLibraryW ReadProcessMemory GetConsoleAliasW IsBadStringPtrA OpenMutexW GetLastError SetLastError GetProcAddress SetFileAttributesA LoadLibraryA InterlockedExchangeAdd FindFirstVolumeMountPointW GetDiskFreeSpaceA EnumResourceTypesW LoadLibraryExA lstrcatW BuildCommDCBA TerminateJobObject GetWindowsDirectoryW OpenFileMappingA CreateFileW WriteConsoleW HeapFree GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW HeapCreate HeapAlloc SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle RtlUnwind WideCharToMultiByte GetACP GetOEMCP IsValidCodePage HeapSize RaiseException HeapReAlloc IsProcessorFeaturePresent GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW CloseHandle

user32

GetKeyboardLayoutNameW DdeCmpStringHandles GetCaretPos GetWindowTextLengthA

Sharing

General

Malware Config

Signatures

File Explorer

cb5a0d461b5a3b743512012fad2824c2c240ef469cf8c10bcfa647fe0c24e821

kernel32

user32

generic