eb973f49b1db6de54471ee34d668e4f1fb079b856a311284abe41d115e2c85ad

General

Target
eb973f49b1db6de54471ee34d668e4f1fb079b856a311284abe41d115e2c85ad
Size 431KB
Sample240911-kekxpasbjf
SHA256 eb973f49b1db6de54471ee34d668e4f1fb079b856a311284abe41d115e2c85ad
MD5 bb228b1ce76ee8fc38f2085e37f28236
SHA1 d3b5540cbdb18215178b4bf1042d5f5d41af1ee1
SHA512 d444b4f95f54ad549aa739f11b7a4e8eca8663db573a6e5304c60f223fe70bad2b61cc6964351a53e7373548c1ff5b4ed10dec1d705fef3a4d8f70a152ebeb20
SSDEEP 6144:XNXYiQbRBVW4qzPUgwwkKPvetP+ZsRBFufhPklb80PfAOK+l8O:RY1bZqzRwwkKOhUpKb8Ktb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb973f49b1db6de54471ee34d668e4f1fb079b856a311284abe41d115e2c85ad

File Explorer

eb973f49b1db6de54471ee34d668e4f1fb079b856a311284abe41d115e2c85ad

.exe 431KB

eb973f49b1db6de54471ee34d668e4f1fb079b856a311284abe41d115e2c85ad

IMPHASH cbeab1e60ccd74963e0cd5b5dec23397
SHA256 eb973f49b1db6de54471ee34d668e4f1fb079b856a311284abe41d115e2c85ad
MD5 bb228b1ce76ee8fc38f2085e37f28236
SHA1 d3b5540cbdb18215178b4bf1042d5f5d41af1ee1
SHA512 d444b4f95f54ad549aa739f11b7a4e8eca8663db573a6e5304c60f223fe70bad2b61cc6964351a53e7373548c1ff5b4ed10dec1d705fef3a4d8f70a152ebeb20
SSDEEP 6144:XNXYiQbRBVW4qzPUgwwkKPvetP+ZsRBFufhPklb80PfAOK+l8O:RY1bZqzRwwkKOhUpKb8Ktb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19051

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile InterlockedIncrement EnumCalendarInfoW GetCommState InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW SetVolumeMountPointW UnlockFile CreateHardLinkA GetModuleHandleW GetTickCount EnumCalendarInfoExW FindNextVolumeMountPointA GetNumberFormatA CreateActCtxW TlsSetValue GlobalAlloc SetFileShortNameW LoadLibraryW LocalShrink GetCalendarInfoW GetCalendarInfoA CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetFileAttributesA VerifyVersionInfoA GetModuleFileNameW GetThreadPriorityBoost CreateJobObjectA LCMapStringA GetConsoleAliasExesA GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW SetLastError GetProcAddress CreateNamedPipeA LoadLibraryA CreateFileMappingW EnumDateFormatsA GlobalUnWire GetProcessShutdownParameters VirtualProtect OpenEventW PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters GetDiskFreeSpaceExW ReadConsoleInputW GetWindowsDirectoryW DebugBreak GetTempPathA CommConfigDialogW CloseHandle WriteConsoleW IsProcessorFeaturePresent CreateFileW FlushFileBuffers GetConsoleMode GetLocaleInfoA PeekNamedPipe SetDefaultCommConfigA InterlockedExchange EnumResourceNamesW MultiByteToWideChar HeapFree HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess HeapCreate ExitProcess WriteFile GetStdHandle Sleep HeapSize SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte LCMapStringW GetStringTypeW HeapReAlloc RtlUnwind SetStdHandle GetConsoleCP

user32

CharUpperA DrawStateA LoadMenuW GetWindowLongA GetSysColor GetMenuStringA GetCaretPos GetMenu

gdi32

GetCharWidthFloatA CreateDCA GetCharWidth32A GetBkMode

Sharing

General

Malware Config

Signatures

File Explorer

eb973f49b1db6de54471ee34d668e4f1fb079b856a311284abe41d115e2c85ad

kernel32

user32

gdi32

generic