0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52

Sharing

Copy URL Twitter E-mail

General

Target
0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52
Size 409KB
Sample240926-2frkastglf
SHA256 0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52
MD5 2f59fbd6623872fbdc2f63d18023bfda
SHA1 a71fd212dc780edd062584acfe3fc28a8090d039
SHA512 bd2caeb7e88b333b31a864b66fe7b14cdf86560b488ae2b911893a059e184e7a80f0ede8423ac8c10de2bcff3f5a85d1477f0a2e74986066f69d636d159b62f8
SSDEEP 6144:6FlsK6LzPfEoIw13JVbP2GOSbkee7xJVGZchwrWEKCoD0Yj8lmxEkuPF7:zK6HfEBsJVblOIQxGZYIWlaNV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52

File Explorer

0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52

.exe 409KB

0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52

IMPHASH 3f8722ca559b0bb5005a556460a2361a
SHA256 0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52
MD5 2f59fbd6623872fbdc2f63d18023bfda
SHA1 a71fd212dc780edd062584acfe3fc28a8090d039
SHA512 bd2caeb7e88b333b31a864b66fe7b14cdf86560b488ae2b911893a059e184e7a80f0ede8423ac8c10de2bcff3f5a85d1477f0a2e74986066f69d636d159b62f8
SSDEEP 6144:6FlsK6LzPfEoIw13JVbP2GOSbkee7xJVGZchwrWEKCoD0Yj8lmxEkuPF7:zK6HfEBsJVblOIQxGZYIWlaNV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW InterlockedCompareExchange SetVolumeMountPointW CreateHardLinkA GetModuleHandleW CreateNamedPipeW EnumCalendarInfoExW GetNumberFormatA CreateActCtxW TlsSetValue LoadLibraryW GetLocaleInfoW GetCalendarInfoA CreateEventA GetFileAttributesA GetTimeFormatW GetModuleFileNameW FindNextVolumeMountPointW GetTempPathW GetShortPathNameA CreateJobObjectA VerifyVersionInfoW InterlockedExchange GlobalUnfix GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA PeekConsoleInputW EnumSystemCodePagesW InterlockedIncrement SetComputerNameA LoadModule SetThreadPriorityBoost InterlockedExchangeAdd CreateFileMappingA LocalAlloc GetFileType FoldStringW GetProcessShutdownParameters LoadLibraryExA VirtualProtect EnumDateFormatsW GetFileTime WaitForDebugEvent OpenEventW SetFileShortNameA GetVersionExA GetDiskFreeSpaceExW GetWindowsDirectoryW LocalFree LCMapStringW CommConfigDialogW CloseHandle GetStringTypeW CreateFileW IsProcessorFeaturePresent MultiByteToWideChar WriteConsoleW GetConsoleAliasExesLengthA SetEndOfFile GetConsoleAliasExesA EnumCalendarInfoA GlobalMemoryStatus GetConsoleDisplayMode SetDefaultCommConfigA SetStdHandle FlushFileBuffers IsValidCodePage GetOEMCP HeapAlloc EncodePointer DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess ExitProcess WriteFile HeapCreate Sleep HeapSize HeapFree FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP

user32

InsertMenuItemW SetCaretPos GetSysColor GetWindowLongW LoadMenuA GetMenuStringW CharUpperA GetMenu DrawStateA

gdi32

GetBkMode GetCharWidthFloatA CreateDCA GetCharWidth32A GetTextMetricsA GetCharWidthI

ole32

CoUnmarshalHresult

winhttp

WinHttpConnect

Sharing

General

Malware Config

Signatures

File Explorer

0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52

kernel32

user32

gdi32

ole32

winhttp

generic