1a528249f9ab6f9e2703da296f30b990e3b3b73edccc52be34eabd22959e4dbe

General

Target
1a528249f9ab6f9e2703da296f30b990e3b3b73edccc52be34eabd22959e4dbe
Size 748KB
Sample240717-hszxnashpc
SHA256 1a528249f9ab6f9e2703da296f30b990e3b3b73edccc52be34eabd22959e4dbe
MD5 12a3a6f7b22079f15c8c9bc9bcb9d42e
SHA1 5cbc6f8d4bfb9d97d0290122427c73742799718c
SHA512 2b86ccc4cb91ae3b22d2f5ce482e9124ec4cf0c4037927e8b4786c28beac813a7bf565a42682ea35125dcc9c4a62d6a186e9dde485fcfc02fb51f303ef18bf87
SSDEEP 12288:/csUEyLXtvFWrnPxKUOEU/PDUyO+sAwyUwr7Gxz4x7L5nc:RULdsrnEUOEEPDy+sjI6x0JL5c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a528249f9ab6f9e2703da296f30b990e3b3b73edccc52be34eabd22959e4dbe

File Explorer

1a528249f9ab6f9e2703da296f30b990e3b3b73edccc52be34eabd22959e4dbe

.exe 748KB

1a528249f9ab6f9e2703da296f30b990e3b3b73edccc52be34eabd22959e4dbe

IMPHASH 3b5d538294e37329e8fa1c54ec93d918
SHA256 1a528249f9ab6f9e2703da296f30b990e3b3b73edccc52be34eabd22959e4dbe
MD5 12a3a6f7b22079f15c8c9bc9bcb9d42e
SHA1 5cbc6f8d4bfb9d97d0290122427c73742799718c
SHA512 2b86ccc4cb91ae3b22d2f5ce482e9124ec4cf0c4037927e8b4786c28beac813a7bf565a42682ea35125dcc9c4a62d6a186e9dde485fcfc02fb51f303ef18bf87
SSDEEP 12288:/csUEyLXtvFWrnPxKUOEU/PDUyO+sAwyUwr7Gxz4x7L5nc:RULdsrnEUOEEPDy+sjI6x0JL5c
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18788

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCompact SetEndOfFile LocalCompact CreateHardLinkA EnumResourceTypesA GlobalAlloc LoadLibraryW ReadConsoleInputA AssignProcessToJobObject IsBadWritePtr GlobalUnlock GetLastError SetLastError GetProcAddress IsBadHugeWritePtr CreateJobSet VerLanguageNameW LoadLibraryA SetConsoleCtrlHandler CreateEventW AddAtomA HeapWalk GetModuleFileNameA GetOEMCP EnumResourceNamesA GetCurrentDirectoryA GetFileTime GetCurrentThreadId Module32NextW GetDiskFreeSpaceExW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer HeapReAlloc IsValidLocale WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate ReadFile WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA CreateFileW

user32

LoadMenuA GetKeyboardLayout CharUpperBuffA SetCursorPos CharUpperW GetSystemMetrics SetCaretPos GetCaretBlinkTime GetMessageTime

Sharing

General

Malware Config

Signatures

File Explorer

1a528249f9ab6f9e2703da296f30b990e3b3b73edccc52be34eabd22959e4dbe

kernel32

user32

generic