b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

General

Target
b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb
Size 239KB
Sample240624-gey8jasbjm
SHA256 b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb
MD5 e0a475f2ac0e9c3dad905d8ce84f62cb
SHA1 6b789faafed3e4e2d318c9ec9300f9ba3c865374
SHA512 a23d30a9fc9d2560fe37b6d9ab334576e956412ca7841f63f051a54aa77a4e3bcf6b1b5e4e28304b06fde02028b20c6ff1297f750c4735281168164d3397cf46
SSDEEP 3072:wiPU1EqslJWmOppnTiT6q5I6+vLXmdXSXxw14UUXmNXMQrF9aH3W:M1E/lJo1TiTDGdvLXcXSh7NEbc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

File Explorer

b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

.exe 239KB

b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

IMPHASH 42331405174d8da11fa606a7521f210a
SHA256 b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb
MD5 e0a475f2ac0e9c3dad905d8ce84f62cb
SHA1 6b789faafed3e4e2d318c9ec9300f9ba3c865374
SHA512 a23d30a9fc9d2560fe37b6d9ab334576e956412ca7841f63f051a54aa77a4e3bcf6b1b5e4e28304b06fde02028b20c6ff1297f750c4735281168164d3397cf46
SSDEEP 3072:wiPU1EqslJWmOppnTiT6q5I6+vLXmdXSXxw14UUXmNXMQrF9aH3W:M1E/lJo1TiTDGdvLXcXSh7NEbc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue OpenJobObjectA InterlockedCompareExchange CreateHardLinkA GetSystemDefaultLCID GetTickCount GetNumberFormatA GlobalFindAtomA LoadLibraryW GetConsoleAliasW SetLastError GetProcAddress SetFileAttributesA LoadLibraryA OpenMutexA LocalAlloc GetConsoleAliasesLengthW GetDiskFreeSpaceA GlobalHandle EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA LoadLibraryExA lstrcatW OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW SetStdHandle WriteConsoleW CloseHandle SetFilePointer FlushFileBuffers FindResourceA IsBadStringPtrW GetComputerNameA FindFirstVolumeMountPointW GetSystemDefaultLangID MultiByteToWideChar GetLastError HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate HeapFree HeapAlloc WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep WideCharToMultiByte RtlUnwind LCMapStringW GetStringTypeW HeapSize RaiseException GetConsoleCP GetConsoleMode CreateFileW

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementA

advapi32

BackupEventLogA ClearEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

kernel32

user32

gdi32

advapi32

generic