52fa843d5d09924fb240052144e6828263b9a4bf11eb3d2037405d2db8972bd4N

Sharing

Copy URL Twitter E-mail

General

Target
52fa843d5d09924fb240052144e6828263b9a4bf11eb3d2037405d2db8972bd4N
Size 1.2MB
Sample241107-ejjmjaxmel
SHA256 52fa843d5d09924fb240052144e6828263b9a4bf11eb3d2037405d2db8972bd4
MD5 f22a3592751ffcde9933caae5e98b0e0
SHA1 d77b2f0ee679b17033ad7f4532f7f094a5703a42
SHA512 92d2f48976db63aa9ea72489f421bc52be0b1de348f9d40d18bac83c159d689873a974f5824f02459633a6041351f566d9c6bdef6c1c514934061afd12aa2b85
SSDEEP 24576:r/QU+XFJWKkkkkkkI5YvasDJTtpz7C8Gye3We8o4vNYof58mi:rEXFJW3Yiylth7JQ/WviV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52fa843d5d09924fb240052144e6828263b9a4bf11eb3d2037405d2db8972bd4N

File Explorer

52fa843d5d09924fb240052144e6828263b9a4bf11eb3d2037405d2db8972bd4N

.exe 1.2MB

52fa843d5d09924fb240052144e6828263b9a4bf11eb3d2037405d2db8972bd4N

IMPHASH 5b5affe5cc3d8e2098fc60270b23e0a6
SHA256 52fa843d5d09924fb240052144e6828263b9a4bf11eb3d2037405d2db8972bd4
MD5 f22a3592751ffcde9933caae5e98b0e0
SHA1 d77b2f0ee679b17033ad7f4532f7f094a5703a42
SHA512 92d2f48976db63aa9ea72489f421bc52be0b1de348f9d40d18bac83c159d689873a974f5824f02459633a6041351f566d9c6bdef6c1c514934061afd12aa2b85
SSDEEP 24576:r/QU+XFJWKkkkkkkI5YvasDJTtpz7C8Gye3We8o4vNYof58mi:rEXFJW3Yiylth7JQ/WviV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA FreeSid RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegCreateKeyExA RegQueryInfoKeyA

kernel32

LocalAlloc GetLastError GetCurrentProcess LoadLibraryA CloseHandle LocalFree GetFileAttributesA GetPrivateProfileStringA GetPrivateProfileIntA lstrlenA lstrcmpiA lstrcatA GetShortPathNameA GetSystemDirectoryA RemoveDirectoryA lstrcpyA FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA GetModuleFileNameA FindClose GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte ExitProcess GetProcAddress GetStartupInfoA GetCommandLineA LoadResource FindResourceA CreateMutexA SetEvent CreateEventA SetCurrentDirectoryA CreateThread ResetEvent TerminateThread GetVersionExA FreeLibrary GetExitCodeProcess WaitForSingleObject CreateProcessA GetTempPathA FreeResource LockResource SizeofResource CreateFileA ReadFile WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GetTempFileNameA GetSystemInfo GetDriveTypeA lstrcpynA GetVolumeInformationA GetCurrentDirectoryA LoadLibraryExA GetModuleHandleA CreateDirectoryA ExpandEnvironmentStringsA FormatMessageA EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA

gdi32

GetDeviceCaps

user32

ExitWindowsEx CharNextA CharUpperA CharPrevA SetWindowLongA wsprintfA GetWindowLongA CallWindowProcA GetDlgItem SetForegroundWindow SetWindowTextA SendDlgItemMessageA EnableWindow GetDesktopWindow EndDialog DispatchMessageA LoadStringA PeekMessageA MessageBoxA SetWindowPos ReleaseDC GetDC GetWindowRect ShowWindow DialogBoxIndirectParamA SetDlgItemTextA MessageBeep SendMessageA GetDlgItemTextA MsgWaitForMultipleObjects GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

52fa843d5d09924fb240052144e6828263b9a4bf11eb3d2037405d2db8972bd4N

advapi32

kernel32

gdi32

user32

comctl32

version

generic