537afa11519e38a93a1270a859040f804ab2c894d451d58d80c7e497b78549fe

General

Target
537afa11519e38a93a1270a859040f804ab2c894d451d58d80c7e497b78549fe
Size 400KB
Sample240905-lybc2axfqp
SHA256 537afa11519e38a93a1270a859040f804ab2c894d451d58d80c7e497b78549fe
MD5 56bcd07602b26cd5c6224dd22bb26b7c
SHA1 c7bd8d8c02a310beaf6abd1c58edaa9d02b5f2a2
SHA512 a3eb4d77155f9d9533e7969ea737c537776e108e7d943269d21fcc6dc63a58e46d13135549c659d86a6de9123f8add18c49beee14c470b7c57ef3646bef57b7b
SSDEEP 6144:mPAbuY32ftPCe4n79+JtUKzBqddIs00jUS0l/g5VfcA:mcuY32ftPCb79KAUs00j10lWVf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
537afa11519e38a93a1270a859040f804ab2c894d451d58d80c7e497b78549fe

File Explorer

537afa11519e38a93a1270a859040f804ab2c894d451d58d80c7e497b78549fe

.exe 400KB

537afa11519e38a93a1270a859040f804ab2c894d451d58d80c7e497b78549fe

IMPHASH 217ba609a66907c9a97999f413ed5449
SHA256 537afa11519e38a93a1270a859040f804ab2c894d451d58d80c7e497b78549fe
MD5 56bcd07602b26cd5c6224dd22bb26b7c
SHA1 c7bd8d8c02a310beaf6abd1c58edaa9d02b5f2a2
SHA512 a3eb4d77155f9d9533e7969ea737c537776e108e7d943269d21fcc6dc63a58e46d13135549c659d86a6de9123f8add18c49beee14c470b7c57ef3646bef57b7b
SSDEEP 6144:mPAbuY32ftPCe4n79+JtUKzBqddIs00jUS0l/g5VfcA:mcuY32ftPCb79KAUs00j10lWVf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

28385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess SetDefaultCommConfigW SetEnvironmentVariableW CreateJobObjectW UnlockFile CreateHardLinkA GetModuleHandleW GetTickCount FindNextVolumeMountPointA GetNumberFormatA SetCommState GlobalAlloc SetFileShortNameW LoadLibraryW GetCalendarInfoA SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetFileAttributesW VerifyVersionInfoA GetModuleFileNameW CreateActCtxA GetThreadPriorityBoost LCMapStringA InterlockedExchange GetLogicalDriveStringsA SetLastError GetProcAddress CreateNamedPipeA GetConsoleDisplayMode GetProcessVersion InterlockedDecrement InterlockedExchangeAdd CreateFileMappingW CreateEventW OpenEventA GlobalWire EnumDateFormatsA EnumResourceNamesA VirtualProtect GetCurrentDirectoryA PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters GetDiskFreeSpaceExA ReadConsoleInputW DebugBreak GetTempPathA EnumCalendarInfoExA LocalFree TlsFree CommConfigDialogW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP EnumCalendarInfoW GetLocaleInfoA SetEndOfFile GetConsoleAliasExesA MultiByteToWideChar HeapAlloc GetLastError HeapReAlloc ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess HeapFree IsProcessorFeaturePresent WriteFile GetStdHandle HeapCreate ReadFile EnterCriticalSection LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep RaiseException SetStdHandle RtlUnwind HeapSize CreateFileW

user32

GetMenuStringW DrawStateA LoadMenuW CharUpperW GetSysColor GetCaretPos SetMenu

gdi32

CreateDCW GetBitmapBits GetCharWidthFloatA GetCharWidth32A

Sharing

General

Malware Config

Signatures

File Explorer

537afa11519e38a93a1270a859040f804ab2c894d451d58d80c7e497b78549fe

kernel32

user32

gdi32

generic