5b1746b23a310ec39c8b6f5178bbc7c5b04d0dc1b51b7e542ce57d21e2b10fa8

General

Target
5b1746b23a310ec39c8b6f5178bbc7c5b04d0dc1b51b7e542ce57d21e2b10fa8
Size 488KB
Sample241109-2h7passqes
SHA256 5b1746b23a310ec39c8b6f5178bbc7c5b04d0dc1b51b7e542ce57d21e2b10fa8
MD5 a4256a294e255a85f197496bc02cda0e
SHA1 26cad2b4801d543ce52c03b4bb6278363b86187c
SHA512 6a8ab66a790ec139f48a1d9f8af6183303e7d2be3839706a01f9fd5ff0c3e227fea298bc11fe7655346143d5e36d0b58011f4b5a0e17d15e465b7223479872a5
SSDEEP 12288:9d4NJsFL9KXOq0ehu7L6o0aiPhmMK3LXb:96NazKXNY7IaiPtKv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b1746b23a310ec39c8b6f5178bbc7c5b04d0dc1b51b7e542ce57d21e2b10fa8

File Explorer

5b1746b23a310ec39c8b6f5178bbc7c5b04d0dc1b51b7e542ce57d21e2b10fa8

.exe 488KB

5b1746b23a310ec39c8b6f5178bbc7c5b04d0dc1b51b7e542ce57d21e2b10fa8

IMPHASH 85a564fb49e125ed724e4cc138258faf
SHA256 5b1746b23a310ec39c8b6f5178bbc7c5b04d0dc1b51b7e542ce57d21e2b10fa8
MD5 a4256a294e255a85f197496bc02cda0e
SHA1 26cad2b4801d543ce52c03b4bb6278363b86187c
SHA512 6a8ab66a790ec139f48a1d9f8af6183303e7d2be3839706a01f9fd5ff0c3e227fea298bc11fe7655346143d5e36d0b58011f4b5a0e17d15e465b7223479872a5
SSDEEP 12288:9d4NJsFL9KXOq0ehu7L6o0aiPhmMK3LXb:96NazKXNY7IaiPtKv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

41872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalCompact SetUnhandledExceptionFilter GetConsoleAliasA InterlockedDecrement GetEnvironmentStringsW SetComputerNameW GetProcessPriorityBoost GetModuleHandleW GetTickCount FindNextVolumeMountPointA GetConsoleAliasesLengthA GetDriveTypeA GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsProcessInJob GetConsoleAliasExesLengthW GetFileAttributesW GetModuleFileNameW GetVolumePathNameA GetStringTypeExA GetNamedPipeHandleStateW EnumCalendarInfoA GetProcAddress CreateJobSet RemoveDirectoryA PrepareTape Process32FirstW LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA EnumResourceTypesW FindNextFileA FreeEnvironmentStringsW WaitForDebugEvent SetFileShortNameA DeleteFileW GetConsoleProcessList EnumSystemLocalesW CreateFileW WriteConsoleW FlushFileBuffers InterlockedFlushSList CreateMutexW InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW SetConsoleCtrlHandler FreeLibrary SetStdHandle GetConsoleMode DeleteFileA

user32

DefDlgProcA GetMenuBarInfo

advapi32

ReportEventW

Sharing

General

Malware Config

Signatures

File Explorer

5b1746b23a310ec39c8b6f5178bbc7c5b04d0dc1b51b7e542ce57d21e2b10fa8

kernel32

user32

advapi32

generic