a651b5f8a0944c87d238bafbfe8b50f490f8977687014648e195b80212435dd8

General

Target
a651b5f8a0944c87d238bafbfe8b50f490f8977687014648e195b80212435dd8
Size 1.1MB
Sample240620-yfec7avblc
SHA256 a651b5f8a0944c87d238bafbfe8b50f490f8977687014648e195b80212435dd8
MD5 2a642ef1db7c4d2e3de2595af267c10b
SHA1 1581f035be57e581e3d51c1abbaf99fdcef26529
SHA512 9f49ea2dd0eac722efc0eb2f41929e844a39478b1873671bbee424139f8381b27a3661c82d99ed56ed133b098d95771e9114ea36dbe62a4dce430e44814c1ef5
SSDEEP 12288:5eKeLf+/zLozrmdMrmrzaewVu0P8VbAL96X1lD9r2IFeyPJoXBdvRt6+n7h3f:5eKrzLo/mKu0PAbAL0xzFeyJ69h3f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a651b5f8a0944c87d238bafbfe8b50f490f8977687014648e195b80212435dd8

File Explorer

a651b5f8a0944c87d238bafbfe8b50f490f8977687014648e195b80212435dd8

.exe 1.1MB

a651b5f8a0944c87d238bafbfe8b50f490f8977687014648e195b80212435dd8

IMPHASH 0053c01cdd0614a49d754b0f32e8777f
SHA256 a651b5f8a0944c87d238bafbfe8b50f490f8977687014648e195b80212435dd8
MD5 2a642ef1db7c4d2e3de2595af267c10b
SHA1 1581f035be57e581e3d51c1abbaf99fdcef26529
SHA512 9f49ea2dd0eac722efc0eb2f41929e844a39478b1873671bbee424139f8381b27a3661c82d99ed56ed133b098d95771e9114ea36dbe62a4dce430e44814c1ef5
SSDEEP 12288:5eKeLf+/zLozrmdMrmrzaewVu0P8VbAL96X1lD9r2IFeyPJoXBdvRt6+n7h3f:5eKrzLo/mKu0PAbAL0xzFeyJ69h3f
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

81549

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\dailybuild_fix_5.4\wegame_client\build\bin\Release\client_launcher.pdb

kernel32

Sleep CloseHandle OpenEventA GetModuleFileNameW CreateProcessW GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW OutputDebugStringA MultiByteToWideChar WideCharToMultiByte WaitForSingleObject RaiseException GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle TerminateProcess DecodePointer OpenProcess EnterCriticalSection LeaveCriticalSection GetCPInfo EncodePointer SetLastError SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW IsDebuggerPresent OutputDebugStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind FreeLibrary LoadLibraryExW GetFileAttributesExW ExitProcess GetModuleHandleExW GetModuleFileNameA GetStdHandle WriteFile GetCommandLineA GetACP HeapAlloc HeapFree HeapReAlloc GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapSize FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetProcessHeap CreateFileW

user32

SendMessageA FindWindowA

shell32

ShellExecuteExW

advapi32

RegOpenKeyExW RegQueryValueExW

Sharing

General

Malware Config

Signatures

File Explorer

a651b5f8a0944c87d238bafbfe8b50f490f8977687014648e195b80212435dd8

kernel32

user32

shell32

advapi32

generic