011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

General

Target
011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d
Size 399KB
Sample240627-prp5dstfrl
SHA256 011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d
MD5 630a16099e944d9740c672590549a7e3
SHA1 5dcc487e71e9dfaee1eddbb603a438388f42d39b
SHA512 6ec9591446653976343f5da828771bb705bc0d510baa904ac803f7a84d4811e6c38295e5afe536cb5f144c380459ad66f6e366a7b9c3d745e7ccef7ee1fa6855
SSDEEP 6144:LqLEr1UPIfL2jQNevRCZI+wTjrHhcew78qQMT573WT:ugJUQq0NIRqhwTjrHhc98qQMT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

File Explorer

011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

.exe 399KB

011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

IMPHASH e084acefa2830b924f9e3b45256f4dfc
SHA256 011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d
MD5 630a16099e944d9740c672590549a7e3
SHA1 5dcc487e71e9dfaee1eddbb603a438388f42d39b
SHA512 6ec9591446653976343f5da828771bb705bc0d510baa904ac803f7a84d4811e6c38295e5afe536cb5f144c380459ad66f6e366a7b9c3d745e7ccef7ee1fa6855
SSDEEP 6144:LqLEr1UPIfL2jQNevRCZI+wTjrHhcew78qQMT573WT:ugJUQq0NIRqhwTjrHhc98qQMT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6403

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW SetCommBreak GetCommProperties GetModuleHandleW GetTickCount GetConsoleTitleA ReadConsoleOutputA ActivateActCtx GlobalAlloc LoadLibraryW SetVolumeMountPointA lstrcpynW WriteConsoleW GetConsoleAliasesW GetLogicalDriveStringsA OpenJobObjectA GetProcAddress SetFileApisToOEM LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc AddAtomW AddAtomA FoldStringW GetModuleFileNameA lstrcatW BuildCommDCBA FindFirstVolumeW EnumCalendarInfoExA GetNumaProcessorNode GetConsoleAliasExesLengthA GetLastError GetComputerNameA MultiByteToWideChar GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle InitializeCriticalSectionAndSpinCount ReadFile CreateFileA CloseHandle

gdi32

GetCharWidth32W

advapi32

EnumDependentServicesW

ole32

CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

kernel32

gdi32

advapi32

ole32

generic