518673f9fa54dc8c281e7e7e565ebe7e86ec5ce67fc2029dce45e7e1f6d8a5f9

General

Target
518673f9fa54dc8c281e7e7e565ebe7e86ec5ce67fc2029dce45e7e1f6d8a5f9
Size 1000KB
Sample241109-1a1eks1rcv
SHA256 518673f9fa54dc8c281e7e7e565ebe7e86ec5ce67fc2029dce45e7e1f6d8a5f9
MD5 d6d9120d55bd3bf0e329d8a1075e80d2
SHA1 92761f583e36de5f9915af80e1aaf027d17a8877
SHA512 5689ba29704c9c9cce3bd553bd9ebf884cb7b716b7723ab52f9875f1bc68b76be845cc06042c389e23336d5e431c4c85d567ebb0ed1888f3a950da5d6d348deb
SSDEEP 24576:RTLrvnFOPYjIA0NCw+J3Hl+yV5vCoyvIc5zlYWSSpb:ZrvFqYjbfJV+QvCoyZzt9p
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
518673f9fa54dc8c281e7e7e565ebe7e86ec5ce67fc2029dce45e7e1f6d8a5f9

File Explorer

518673f9fa54dc8c281e7e7e565ebe7e86ec5ce67fc2029dce45e7e1f6d8a5f9

.exe 1000KB

518673f9fa54dc8c281e7e7e565ebe7e86ec5ce67fc2029dce45e7e1f6d8a5f9

IMPHASH cbb199b85bd7e99e36eb212e7f14e32a
SHA256 518673f9fa54dc8c281e7e7e565ebe7e86ec5ce67fc2029dce45e7e1f6d8a5f9
MD5 d6d9120d55bd3bf0e329d8a1075e80d2
SHA1 92761f583e36de5f9915af80e1aaf027d17a8877
SHA512 5689ba29704c9c9cce3bd553bd9ebf884cb7b716b7723ab52f9875f1bc68b76be845cc06042c389e23336d5e431c4c85d567ebb0ed1888f3a950da5d6d348deb
SSDEEP 24576:RTLrvnFOPYjIA0NCw+J3Hl+yV5vCoyvIc5zlYWSSpb:ZrvFqYjbfJV+QvCoyZzt9p
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23751

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ved.pdb

kernel32

FindResourceExW BackupSeek GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnlock GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA lstrlenA GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA AddAtomA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetCPInfoExA TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA HeapSize GetDateFormatW GetConsoleDisplayMode GetComputerNameA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

518673f9fa54dc8c281e7e7e565ebe7e86ec5ce67fc2029dce45e7e1f6d8a5f9

kernel32

user32

gdi32

generic