8a55c91378e4da0e34f9704900836b712d5a20e53de863966a4dabfecfe1360e

General

Target
8a55c91378e4da0e34f9704900836b712d5a20e53de863966a4dabfecfe1360e
Size 282KB
Sample240621-gvyxpstdrk
SHA256 8a55c91378e4da0e34f9704900836b712d5a20e53de863966a4dabfecfe1360e
MD5 e1670719f338ff60ddab8b963cb2cecf
SHA1 de7567f68888c913918a7af0fcfdef7f2581fa24
SHA512 43edd4ba11b5c04505dec0beededc2bf7e5d1f36d68f0e9b7f2200c6a49c5a0243432c56acf5c4745f8d4f9302d00f957303b713f3e760fa3e3af5e105dd2f8a
SSDEEP 3072:r1syLuvrXOUryeCjzVlcSLa7LfRnJlNoqPui5c5gM3Qfwa3sq08LWgw/M87tf:5DSTXnbalcAwDlNoecVQoQ0KI/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a55c91378e4da0e34f9704900836b712d5a20e53de863966a4dabfecfe1360e

File Explorer

8a55c91378e4da0e34f9704900836b712d5a20e53de863966a4dabfecfe1360e

.exe 282KB

8a55c91378e4da0e34f9704900836b712d5a20e53de863966a4dabfecfe1360e

IMPHASH f5426f6c43b5503f321c9f8f3816a4bc
SHA256 8a55c91378e4da0e34f9704900836b712d5a20e53de863966a4dabfecfe1360e
MD5 e1670719f338ff60ddab8b963cb2cecf
SHA1 de7567f68888c913918a7af0fcfdef7f2581fa24
SHA512 43edd4ba11b5c04505dec0beededc2bf7e5d1f36d68f0e9b7f2200c6a49c5a0243432c56acf5c4745f8d4f9302d00f957303b713f3e760fa3e3af5e105dd2f8a
SSDEEP 3072:r1syLuvrXOUryeCjzVlcSLa7LfRnJlNoqPui5c5gM3Qfwa3sq08LWgw/M87tf:5DSTXnbalcAwDlNoecVQoQ0KI/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue GlobalCompact FindResourceW LoadLibraryExW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalFindAtomA LoadLibraryW GetConsoleAliasW OpenMutexW GetLastError SetLastError GetProcAddress IsBadStringPtrW LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW GetDiskFreeSpaceA OpenJobObjectW EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA lstrcatW OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW HeapSize SetFileAttributesA FindResourceA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementW

Sharing

General

Malware Config

Signatures

File Explorer

8a55c91378e4da0e34f9704900836b712d5a20e53de863966a4dabfecfe1360e

kernel32

user32

gdi32

generic