5c940fd26e0b9ca0041893718bdf14d9244ebcb5a91fee19de13a59c52b59232

General

Target
5c940fd26e0b9ca0041893718bdf14d9244ebcb5a91fee19de13a59c52b59232
Size 1.3MB
Sample241109-ejphsazlgl
SHA256 5c940fd26e0b9ca0041893718bdf14d9244ebcb5a91fee19de13a59c52b59232
MD5 dc098966246906f8d741340a01cbd2da
SHA1 69e2084cf43e5a9a433271f5679d6f3b9ba85629
SHA512 890c242e26a812095ceb3e9fd838a74bb7e76b3f31dd4be61ee3f1c3f3cf9d238a9fdcdc51c9b75f10577d430cb3eadcdcc53b339d22e5923758bace73109aad
SSDEEP 24576:2IKq5dNtV7We2GWqerZwO7Fk8YxeU5F8Si5LO+rImHhAs4ew2Hk4Q:2I/NKeU1ZwO+eUv8Sima5u4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c940fd26e0b9ca0041893718bdf14d9244ebcb5a91fee19de13a59c52b59232

File Explorer

5c940fd26e0b9ca0041893718bdf14d9244ebcb5a91fee19de13a59c52b59232

.exe 1.3MB

5c940fd26e0b9ca0041893718bdf14d9244ebcb5a91fee19de13a59c52b59232

IMPHASH a1179765140463c0bdef01fcc8c985fc
SHA256 5c940fd26e0b9ca0041893718bdf14d9244ebcb5a91fee19de13a59c52b59232
MD5 dc098966246906f8d741340a01cbd2da
SHA1 69e2084cf43e5a9a433271f5679d6f3b9ba85629
SHA512 890c242e26a812095ceb3e9fd838a74bb7e76b3f31dd4be61ee3f1c3f3cf9d238a9fdcdc51c9b75f10577d430cb3eadcdcc53b339d22e5923758bace73109aad
SSDEEP 24576:2IKq5dNtV7We2GWqerZwO7Fk8YxeU5F8Si5LO+rImHhAs4ew2Hk4Q:2I/NKeU1ZwO+eUv8Sima5u4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

43064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement QueryDosDeviceA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetTickCount GetConsoleAliasesLengthA SetCommState EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsProcessInJob GetConsoleAliasExesLengthW GetStringTypeExW GetConsoleAliasW GetFileAttributesW FindNextVolumeMountPointW SetTapePosition GetNamedPipeHandleStateW EnumSystemLocalesA CreateMutexW GetProcAddress BeginUpdateResourceW CreateJobSet UnhandledExceptionFilter BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FindAtomA FoldStringA GetModuleFileNameA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask SetFileShortNameA GetConsoleProcessList DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA WriteConsoleW FlushFileBuffers GetConsoleMode GetLastError GlobalFix SetStdHandle FreeLibrary WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler CreateFileW

user32

DefDlgProcA GetMenuBarInfo

advapi32

ReportEventW

shell32

FindExecutableA

Sharing

General

Malware Config

Signatures

File Explorer

5c940fd26e0b9ca0041893718bdf14d9244ebcb5a91fee19de13a59c52b59232

kernel32

user32

advapi32

shell32

generic