16f4bd1c05050ea0c039f49360cefa2233f80b39ddc93276c452f57126d50221

General

Target
16f4bd1c05050ea0c039f49360cefa2233f80b39ddc93276c452f57126d50221
Size 1.2MB
Sample241109-e92k2azrek
SHA256 16f4bd1c05050ea0c039f49360cefa2233f80b39ddc93276c452f57126d50221
MD5 77a8d146190842f3d5f877a421794bed
SHA1 13398f318ea8a6565b4385f5d7a25e6e154d4faa
SHA512 1c8ca3fd3f613f829c4ee7a6e060d662973c055cbf1237b7c97195f7e7a511fa5d9e0bdf2e1f476bfefae7d34ef0850d800c63aa5715ad7ccafc753c40ed9606
SSDEEP 24576:GDTWYG5l2s+JcVCjiT/r0PTcuGzPP5lMcvBxenYLi1OuheoxY7qYV2GSBm:GDpG5wcVCjiTDbb35G0BjiUuh7xXw2L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f4bd1c05050ea0c039f49360cefa2233f80b39ddc93276c452f57126d50221

File Explorer

16f4bd1c05050ea0c039f49360cefa2233f80b39ddc93276c452f57126d50221

.exe 1.2MB

16f4bd1c05050ea0c039f49360cefa2233f80b39ddc93276c452f57126d50221

IMPHASH 7b4896352eacf26f78ef6e8da79677ff
SHA256 16f4bd1c05050ea0c039f49360cefa2233f80b39ddc93276c452f57126d50221
MD5 77a8d146190842f3d5f877a421794bed
SHA1 13398f318ea8a6565b4385f5d7a25e6e154d4faa
SHA512 1c8ca3fd3f613f829c4ee7a6e060d662973c055cbf1237b7c97195f7e7a511fa5d9e0bdf2e1f476bfefae7d34ef0850d800c63aa5715ad7ccafc753c40ed9606
SSDEEP 24576:GDTWYG5l2s+JcVCjiT/r0PTcuGzPP5lMcvBxenYLi1OuheoxY7qYV2GSBm:GDpG5wcVCjiTDbb35G0BjiUuh7xXw2L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

42611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix CreateMutexW EnumCalendarInfoA GetConsoleAliasesLengthW RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW GetCommState ZombifyActCtx QueryDosDeviceA GetNamedPipeHandleStateA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetModuleHandleW GetTickCount GetConsoleTitleA EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc SetFileShortNameW LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GetConsoleAliasW GetFileAttributesW GetBinaryTypeW GetOverlappedResult FindNextVolumeMountPointW SetTapePosition EnumSystemLocalesA GetPrivateProfileIntW GetLastError GetProcAddress CreateJobSet RemoveDirectoryA UnhandledExceptionFilter LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA GetPrivateProfileStructA FoldStringA GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW GetCPInfoExA SetCalendarInfoA SetThreadAffinityMask TerminateJobObject QueryDepthSList MoveFileWithProgressW DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA SetFilePointer CreateFileW WriteConsoleW FlushFileBuffers GetConsoleMode WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary SetStdHandle

user32

DefDlgProcA GetMenuBarInfo

shell32

DuplicateIcon

Sharing

General

Malware Config

Signatures

File Explorer

16f4bd1c05050ea0c039f49360cefa2233f80b39ddc93276c452f57126d50221

kernel32

user32

shell32

generic