5e20503215848b1f680f8cbe7444a3bc76c7916a9c21dbb9e626400ed6b02f7b

General

Target
5e20503215848b1f680f8cbe7444a3bc76c7916a9c21dbb9e626400ed6b02f7b
Size 460KB
Sample241109-2ndy6stfqa
SHA256 5e20503215848b1f680f8cbe7444a3bc76c7916a9c21dbb9e626400ed6b02f7b
MD5 0302c63a17172424bb8cacf008b7e2dc
SHA1 05c077f61bae0f5f5415b985abf975b5a409b6fa
SHA512 4ccd91e6ec3b75025619c8a4c28bd929dfac081d07c54be62efc8da2f9a26695eef77056d839e09efbd28904393645d0c38736f0894c49e74b5446d41d59bc55
SSDEEP 12288:JZFtCwFuwxPXvxo8LPFM9udRoRdwSevkJ5nxf:JPtCwoIPfxoOJIHqkJ5l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e20503215848b1f680f8cbe7444a3bc76c7916a9c21dbb9e626400ed6b02f7b

File Explorer

5e20503215848b1f680f8cbe7444a3bc76c7916a9c21dbb9e626400ed6b02f7b

.exe 460KB

5e20503215848b1f680f8cbe7444a3bc76c7916a9c21dbb9e626400ed6b02f7b

IMPHASH 2ba5a037cb06ff12cf2a6fa8a830314a
SHA256 5e20503215848b1f680f8cbe7444a3bc76c7916a9c21dbb9e626400ed6b02f7b
MD5 0302c63a17172424bb8cacf008b7e2dc
SHA1 05c077f61bae0f5f5415b985abf975b5a409b6fa
SHA512 4ccd91e6ec3b75025619c8a4c28bd929dfac081d07c54be62efc8da2f9a26695eef77056d839e09efbd28904393645d0c38736f0894c49e74b5446d41d59bc55
SSDEEP 12288:JZFtCwFuwxPXvxo8LPFM9udRoRdwSevkJ5nxf:JPtCwoIPfxoOJIHqkJ5l
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

42694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix CreateMutexW EnumCalendarInfoA RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW ZombifyActCtx QueryDosDeviceA GetNamedPipeHandleStateA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA SetCommState EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc SetFileShortNameW LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GetConsoleAliasW GetFileAttributesW GetBinaryTypeW FindNextVolumeMountPointW SetTapePosition EnumSystemLocalesA GetPrivateProfileIntW GetLastError GetProcAddress BeginUpdateResourceW CreateJobSet UnhandledExceptionFilter LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FindAtomA FoldStringA GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW GetCPInfoExA SetCalendarInfoA SetThreadAffinityMask TerminateJobObject MoveFileWithProgressW DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA WriteConsoleW FlushFileBuffers CreateFileW GetConsoleMode SetStdHandle WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary

user32

DefDlgProcA GetMenuBarInfo

shell32

DuplicateIcon

Sharing

General

Malware Config

Signatures

File Explorer

5e20503215848b1f680f8cbe7444a3bc76c7916a9c21dbb9e626400ed6b02f7b

kernel32

user32

shell32

generic