0489dc7789cc218713ad664df501136d0fdbacb426e404235e5965a5c213521f

General

Target
0489dc7789cc218713ad664df501136d0fdbacb426e404235e5965a5c213521f
Size 252KB
Sample240623-w5cjsaydrc
SHA256 0489dc7789cc218713ad664df501136d0fdbacb426e404235e5965a5c213521f
MD5 28627475aeff6252c149f55ec3b3f57b
SHA1 fc1f6fe0ac2cf065e8a23c92cfb7065cc5635f59
SHA512 24cec71ddfe926d696f726b8296dade4ccb27f916b00b7bd62d14037d1f957db0bb862329ded001e204ac886c9ed6bc1a72002321caab42a6509e6ad967d8204
SSDEEP 3072:p7NldAp+bE3T0OP9SxvGg7prNTHoGOJNQCDgaPDPBiX8IWYK:p6p+bED0ISxvbFN0HDI3k
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0489dc7789cc218713ad664df501136d0fdbacb426e404235e5965a5c213521f

File Explorer

0489dc7789cc218713ad664df501136d0fdbacb426e404235e5965a5c213521f

.exe 252KB

0489dc7789cc218713ad664df501136d0fdbacb426e404235e5965a5c213521f

IMPHASH cc8544457f715a34dc50ce2ce59c3fdc
SHA256 0489dc7789cc218713ad664df501136d0fdbacb426e404235e5965a5c213521f
MD5 28627475aeff6252c149f55ec3b3f57b
SHA1 fc1f6fe0ac2cf065e8a23c92cfb7065cc5635f59
SHA512 24cec71ddfe926d696f726b8296dade4ccb27f916b00b7bd62d14037d1f957db0bb862329ded001e204ac886c9ed6bc1a72002321caab42a6509e6ad967d8204
SSDEEP 3072:p7NldAp+bE3T0OP9SxvGg7prNTHoGOJNQCDgaPDPBiX8IWYK:p6p+bED0ISxvbFN0HDI3k
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW TlsGetValue OpenJobObjectA CreateDirectoryW InterlockedCompareExchange CreateHardLinkA GetSystemDefaultLCID GetWindowsDirectoryA EnumResourceTypesA GlobalFindAtomA LoadLibraryW GetConsoleAliasW IsBadWritePtr GetLastError SetLastError FindResourceA SetFileAttributesA GetDiskFreeSpaceW LoadLibraryA LocalAlloc GlobalHandle GetOEMCP FindFirstVolumeMountPointA LoadLibraryExA OpenFileMappingA CommConfigDialogW SetStdHandle GetComputerNameA GetProcAddress GetSystemDefaultLangID MultiByteToWideChar DecodePointer EncodePointer HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate HeapFree HeapAlloc WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep LCMapStringW GetStringTypeW RtlUnwind HeapSize RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleW CreateFileW

user32

GetCaretPos CloseWindow GetKeyboardLayoutNameA DdeCmpStringHandles

advapi32

ClearEventLogA BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

0489dc7789cc218713ad664df501136d0fdbacb426e404235e5965a5c213521f

kernel32

user32

advapi32

generic