ed92be44f8f857751b2b5317d277f770N

General

Target
ed92be44f8f857751b2b5317d277f770N
Size 539KB
Sample240907-vsj8esvdpp
SHA256 ae6e264fd208a9f42b0889132aa621c92393adb9566c63550af8468d6b24c06f
MD5 ed92be44f8f857751b2b5317d277f770
SHA1 5ba8942a918d93ce4cbcb8e70650e5b99540a88d
SHA512 3c94a2b5684da57857fcde7dce6fff67b5bcc4c04ed41cee36647111ef672f89251b6ff320cbef6f68981e92932213dfbdd7bfd04aed7402e474189548a79ba0
SSDEEP 12288:CGmJWBUXXwzXq9FDZKEhU1VtlSYTnPqpAEIKGW246vq:CGmQinwzkTs131hKTiv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed92be44f8f857751b2b5317d277f770N

File Explorer

ed92be44f8f857751b2b5317d277f770N

.exe 539KB

ed92be44f8f857751b2b5317d277f770N

IMPHASH c4e6fff8f7d4329c876180bf7d63cd9f
SHA256 ae6e264fd208a9f42b0889132aa621c92393adb9566c63550af8468d6b24c06f
MD5 ed92be44f8f857751b2b5317d277f770
SHA1 5ba8942a918d93ce4cbcb8e70650e5b99540a88d
SHA512 3c94a2b5684da57857fcde7dce6fff67b5bcc4c04ed41cee36647111ef672f89251b6ff320cbef6f68981e92932213dfbdd7bfd04aed7402e474189548a79ba0
SSDEEP 12288:CGmJWBUXXwzXq9FDZKEhU1VtlSYTnPqpAEIKGW246vq:CGmQinwzkTs131hKTiv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11002

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetPriorityClass OpenFile lstrlenA IsBadHugeReadPtr BuildCommDCBAndTimeoutsA LoadResource SetUnhandledExceptionFilter SetDefaultCommConfigW CancelWaitableTimer SleepEx ActivateActCtx GlobalAlloc LoadLibraryW WritePrivateProfileStructW IsDBCSLeadByte lstrcatA DisconnectNamedPipe GetNamedPipeHandleStateW FreeLibraryAndExitThread GetCurrentDirectoryW SetLastError ReadFileEx GetLocalTime SetConsoleDisplayMode GetPrivateProfileStructA WaitForMultipleObjects GetOEMCP WaitCommEvent _lread GetModuleHandleA CreateMutexA VirtualProtect FindAtomW lstrcpyW UnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind GetModuleHandleW Sleep GetProcAddress ExitProcess GetLastError SetConsoleCtrlHandler WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapSize GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile GetTimeZoneInformation CreateFileA CloseHandle CompareStringA CompareStringW SetEnvironmentVariableA

Sharing

General

Malware Config

Signatures

File Explorer

ed92be44f8f857751b2b5317d277f770N

kernel32

generic