b4ed59f2391034891fe8af87450a34eaca1518b400182554e392845f0d21e7a1

General

Target
b4ed59f2391034891fe8af87450a34eaca1518b400182554e392845f0d21e7a1
Size 439KB
Sample240620-fdl15stfqm
SHA256 b4ed59f2391034891fe8af87450a34eaca1518b400182554e392845f0d21e7a1
MD5 b2f5d04fc1d63f47ec7cdc2b326b7e83
SHA1 7bf70f68204b0d905d18b1f94d86088f16a15d1f
SHA512 23ab37f544227a863c22ab4aaeb2a80986f5bd75e12a2a41f2cf4ddb0cba0fce20f7560dee6e65cad8f022a1cd616bab2c59722213803d12b699151dc2cfaa3a
SSDEEP 6144:8gNhEV5pZ5BXmp4pEEEXI/ajDfJFb7uNmrkbBlpNezk3g7wZXlQkEDFGqymjv:8gjEV5pZ5hwTuNma8ow7glOsGjv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ed59f2391034891fe8af87450a34eaca1518b400182554e392845f0d21e7a1

File Explorer

b4ed59f2391034891fe8af87450a34eaca1518b400182554e392845f0d21e7a1

.exe 439KB

b4ed59f2391034891fe8af87450a34eaca1518b400182554e392845f0d21e7a1

IMPHASH 99046e3afc60e2ca10c62342349ab573
SHA256 b4ed59f2391034891fe8af87450a34eaca1518b400182554e392845f0d21e7a1
MD5 b2f5d04fc1d63f47ec7cdc2b326b7e83
SHA1 7bf70f68204b0d905d18b1f94d86088f16a15d1f
SHA512 23ab37f544227a863c22ab4aaeb2a80986f5bd75e12a2a41f2cf4ddb0cba0fce20f7560dee6e65cad8f022a1cd616bab2c59722213803d12b699151dc2cfaa3a
SSDEEP 6144:8gNhEV5pZ5BXmp4pEEEXI/ajDfJFb7uNmrkbBlpNezk3g7wZXlQkEDFGqymjv:8gjEV5pZ5hwTuNma8ow7glOsGjv
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

47049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetNumberOfEventLogRecords

kernel32

CreateFileW HeapSize WriteConsoleW CloseHandle WaitForSingleObject CreateThread VirtualAlloc GetCurrentThreadId WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetProcessHeap RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess HeapAlloc HeapFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

b4ed59f2391034891fe8af87450a34eaca1518b400182554e392845f0d21e7a1

advapi32

kernel32

generic