c5cd4932ea8f02c3f8af95ab80eb1612329a657b6c1ed35982e3310e4ebd7b03

General

Target
c5cd4932ea8f02c3f8af95ab80eb1612329a657b6c1ed35982e3310e4ebd7b03
Size 234KB
Sample240717-3m2vaavemj
SHA256 c5cd4932ea8f02c3f8af95ab80eb1612329a657b6c1ed35982e3310e4ebd7b03
MD5 61867a71161ae87b02413bad06e53446
SHA1 eb375d9b4b9089457e0b480f12d977ceb1655b07
SHA512 43e7cfb44fd61e9182fddeab13add5cd6e6cb8ce3e5c7a728daecdf2bb6bc3f157c7c1ab666ae3bf5fb191341b5b43f9e3a4a9d98936b9881c4fc3c1b0be30bd
SSDEEP 3072:jYnp0HalR5aEr0AZsLjhR7OcPlnr2YWwtq+BkkWMV:jYnp5G+fZsLjhRSilhzjOc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5cd4932ea8f02c3f8af95ab80eb1612329a657b6c1ed35982e3310e4ebd7b03

File Explorer

c5cd4932ea8f02c3f8af95ab80eb1612329a657b6c1ed35982e3310e4ebd7b03

.exe 234KB

c5cd4932ea8f02c3f8af95ab80eb1612329a657b6c1ed35982e3310e4ebd7b03

IMPHASH 939bb23ece53cd668e699322eee9e90a
SHA256 c5cd4932ea8f02c3f8af95ab80eb1612329a657b6c1ed35982e3310e4ebd7b03
MD5 61867a71161ae87b02413bad06e53446
SHA1 eb375d9b4b9089457e0b480f12d977ceb1655b07
SHA512 43e7cfb44fd61e9182fddeab13add5cd6e6cb8ce3e5c7a728daecdf2bb6bc3f157c7c1ab666ae3bf5fb191341b5b43f9e3a4a9d98936b9881c4fc3c1b0be30bd
SSDEEP 3072:jYnp0HalR5aEr0AZsLjhR7OcPlnr2YWwtq+BkkWMV:jYnp5G+fZsLjhRSilhzjOc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18788

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW HeapCompact SetEndOfFile LocalCompact CreateHardLinkA EnumResourceTypesA GlobalAlloc LoadLibraryW AssignProcessToJobObject IsBadWritePtr GetLastError GetCurrentDirectoryW SetLastError GetProcAddress IsBadHugeWritePtr VerLanguageNameA CreateJobSet SetConsoleCtrlHandler CreateEventW AddAtomA GlobalHandle Module32FirstW GetModuleFileNameA GetOEMCP HeapSetInformation GetFileTime GetCurrentThreadId GetDiskFreeSpaceExA ReadConsoleInputW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate ReadFile WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc CreateFileW

user32

CharUpperBuffA SetCursorPos SetCaretPos GetCaretBlinkTime GetMessageTime ChangeMenuW

Sharing

General

Malware Config

Signatures

File Explorer

c5cd4932ea8f02c3f8af95ab80eb1612329a657b6c1ed35982e3310e4ebd7b03

kernel32

user32

generic