04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862

General

Target
04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862
Size 267KB
Sample240621-m8hersxcjc
SHA256 04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862
MD5 758ef3ac70bed09148f5afde3f920008
SHA1 98631abb82801bd19df3c9ed19688464c9131915
SHA512 a55e3aae3f531f5ce5be6165aa3d9d7c72785acd58e20b01204a49a9ca7b41e4a20b7fd02d58f69d7af39ec5baa406bc09a7f2c55e79307d05d4a5c5318ed715
SSDEEP 3072:zWG8bdodavOTlIV+2WMEf8QyKRqgZP9FO8DI0TS/AY6gw/M87z2:zl8bdOxIUJFp9k8DHt/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862

File Explorer

04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862

.exe 267KB

04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862

IMPHASH 8ebd1371dc345bfb523ee62420b36f28
SHA256 04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862
MD5 758ef3ac70bed09148f5afde3f920008
SHA1 98631abb82801bd19df3c9ed19688464c9131915
SHA512 a55e3aae3f531f5ce5be6165aa3d9d7c72785acd58e20b01204a49a9ca7b41e4a20b7fd02d58f69d7af39ec5baa406bc09a7f2c55e79307d05d4a5c5318ed715
SSDEEP 3072:zWG8bdodavOTlIV+2WMEf8QyKRqgZP9FO8DI0TS/AY6gw/M87z2:zl8bdOxIUJFp9k8DHt/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12148

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue FindResourceW LoadLibraryExW OpenJobObjectA InterlockedCompareExchange GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalFindAtomA LoadLibraryW GetConsoleAliasW SetLastError GetProcAddress SetFileAttributesA IsBadStringPtrW OpenMutexA LocalAlloc FindFirstVolumeMountPointW GetDiskFreeSpaceA GlobalHandle EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA lstrcatW OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW IsProcessorFeaturePresent RtlUnwind HeapSize LoadLibraryA FindResourceA MultiByteToWideChar GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetLastError HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep WideCharToMultiByte LCMapStringW GetStringTypeW HeapFree HeapReAlloc

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementW

Sharing

General

Malware Config

Signatures

File Explorer

04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862

kernel32

user32

gdi32

generic