4e0051f489a1b4844e475a837f8daa24d7632a000cc184a1cd05dcac1b407543

General

Target
4e0051f489a1b4844e475a837f8daa24d7632a000cc184a1cd05dcac1b407543
Size 720KB
Sample241109-3cnvnsvbkb
SHA256 4e0051f489a1b4844e475a837f8daa24d7632a000cc184a1cd05dcac1b407543
MD5 e14a4bfa7748dbcd72d21a4bd3b8a2d4
SHA1 a8ebfc31cc5b0ec286759cd6019b82d5ef397c6d
SHA512 9768dff1b172f6bfccb2710452d734d61214bcc4d0f92d9bc58a42cdb609da35b09d6da42a326808c3bee6edcf950773566c1566099da05c4f22ac32da048e12
SSDEEP 12288:c47VVImS6LMfuycuXDJ88G0c8PMLJo85dJIctUL7x773+Z52fK6bbNVB:dS60uyXN8xGYu8pUp7K6fpbnB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e0051f489a1b4844e475a837f8daa24d7632a000cc184a1cd05dcac1b407543

File Explorer

4e0051f489a1b4844e475a837f8daa24d7632a000cc184a1cd05dcac1b407543

.exe 720KB

4e0051f489a1b4844e475a837f8daa24d7632a000cc184a1cd05dcac1b407543

IMPHASH 87d886eda68b09da2d904f9205843127
SHA256 4e0051f489a1b4844e475a837f8daa24d7632a000cc184a1cd05dcac1b407543
MD5 e14a4bfa7748dbcd72d21a4bd3b8a2d4
SHA1 a8ebfc31cc5b0ec286759cd6019b82d5ef397c6d
SHA512 9768dff1b172f6bfccb2710452d734d61214bcc4d0f92d9bc58a42cdb609da35b09d6da42a326808c3bee6edcf950773566c1566099da05c4f22ac32da048e12
SSDEEP 12288:c47VVImS6LMfuycuXDJ88G0c8PMLJo85dJIctUL7x773+Z52fK6bbNVB:dS60uyXN8xGYu8pUp7K6fpbnB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17193

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW SetDefaultCommConfigA CreateMutexW SearchPathW lstrcmpA EnumCalendarInfoA EnumDateFormatsExW CopyFileExW BuildCommDCBAndTimeoutsA VerSetConditionMask GetModuleHandleExW WaitForSingleObject WriteConsoleInputA SetEvent _lclose GetProcessPriorityBoost GetModuleHandleW EnumTimeFormatsW EnumResourceTypesA GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW TerminateProcess GlobalUnlock IsDBCSLeadByteEx SetLastError GetProcAddress GetComputerNameExW GetFirmwareEnvironmentVariableW OpenMutexA OpenWaitableTimerW LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW AddAtomW SetCurrentDirectoryW AddAtomA FreeEnvironmentStringsW FindNextFileW GetStringTypeW PeekConsoleInputA GetCurrentThreadId GetCPInfoExA GetWindowsDirectoryW EnumCalendarInfoExA GetConsoleSelectionInfo DeleteFileA EnumSystemLocalesA GetLocaleInfoA GetLastError MoveFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

LoadMenuA

Sharing

General

Malware Config

Signatures

File Explorer

4e0051f489a1b4844e475a837f8daa24d7632a000cc184a1cd05dcac1b407543

kernel32

user32

generic