65f95d4c4a4222059284139076292b3617fad9656f16b2e1015b34f81760fefdN

General

Target
65f95d4c4a4222059284139076292b3617fad9656f16b2e1015b34f81760fefdN
Size 250KB
Sample241107-s5v5cavjay
SHA256 65f95d4c4a4222059284139076292b3617fad9656f16b2e1015b34f81760fefd
MD5 8aba5e010da858c98a0332d6b8d5c2e0
SHA1 3f12540136ff94be4d593e66c4dd7032203e8116
SHA512 2e140bf0079aa6d0a54c5fc8b1a4ed11890af475fd70bff7fb3f39304afdc49cfe42ad58dadc8287eca7c2a843ce33643584ae3d800acb855653924945e74fa1
SSDEEP 6144:h1OgDPdkBAFZWjadD4s5AbzL+z00ITRYPyt4sTam:h1OgLdaOAbzL+7I+PSTam
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65f95d4c4a4222059284139076292b3617fad9656f16b2e1015b34f81760fefdN

File Explorer

65f95d4c4a4222059284139076292b3617fad9656f16b2e1015b34f81760fefdN

.exe 250KB

65f95d4c4a4222059284139076292b3617fad9656f16b2e1015b34f81760fefdN

IMPHASH 3786a4cf8bfee8b4821db03449141df4
SHA256 65f95d4c4a4222059284139076292b3617fad9656f16b2e1015b34f81760fefd
MD5 8aba5e010da858c98a0332d6b8d5c2e0
SHA1 3f12540136ff94be4d593e66c4dd7032203e8116
SHA512 2e140bf0079aa6d0a54c5fc8b1a4ed11890af475fd70bff7fb3f39304afdc49cfe42ad58dadc8287eca7c2a843ce33643584ae3d800acb855653924945e74fa1
SSDEEP 6144:h1OgDPdkBAFZWjadD4s5AbzL+z00ITRYPyt4sTam:h1OgLdaOAbzL+7I+PSTam
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

84740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantClear SysAllocString

user32

SendMessageA SetTimer DialogBoxParamW DialogBoxParamA SetWindowLongA GetWindowLongA SetWindowTextW LoadIconA LoadStringW LoadStringA CharUpperW CharUpperA DestroyWindow EndDialog PostMessageA ShowWindow MessageBoxW GetDlgItem KillTimer SetWindowTextA

shell32

ShellExecuteExA

kernel32

GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA InterlockedIncrement InterlockedDecrement GetProcAddress GetOEMCP GetACP GetCPInfo IsBadCodePtr IsBadReadPtr GetFileType SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter HeapSize GetCurrentProcess TerminateProcess IsBadWritePtr HeapCreate HeapDestroy GetEnvironmentVariableA SetUnhandledExceptionFilter TlsAlloc ExitProcess GetVersion GetCommandLineA GetStartupInfoA GetModuleHandleA WaitForSingleObject CloseHandle CreateProcessA SetCurrentDirectoryA GetCommandLineW GetVersionExA LeaveCriticalSection EnterCriticalSection DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte GetLastError LoadLibraryA AreFileApisANSI GetModuleFileNameA GetModuleFileNameW LocalFree FormatMessageA FormatMessageW GetWindowsDirectoryA SetFileTime CreateFileW SetLastError SetFileAttributesA RemoveDirectoryA SetFileAttributesW RemoveDirectoryW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW lstrlenA GetFullPathNameA GetFullPathNameW GetCurrentDirectoryA GetTempPathA GetTempFileNameA FindClose FindFirstFileA FindFirstFileW FindNextFileA CreateFileA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetStdHandle WaitForMultipleObjects Sleep VirtualAlloc VirtualFree CreateEventA SetEvent ResetEvent InitializeCriticalSection RtlUnwind RaiseException HeapAlloc HeapFree HeapReAlloc CreateThread GetCurrentThreadId TlsSetValue TlsGetValue ExitThread

Sharing

General

Malware Config

Signatures

File Explorer

65f95d4c4a4222059284139076292b3617fad9656f16b2e1015b34f81760fefdN

oleaut32

user32

shell32

kernel32

generic