878542fd526922b4a8dc11016386c49b5081e2b915acf1e7ee8a1b221b892eca

General

Target
878542fd526922b4a8dc11016386c49b5081e2b915acf1e7ee8a1b221b892eca
Size 538KB
Sample241110-ahn4eaxrdq
SHA256 878542fd526922b4a8dc11016386c49b5081e2b915acf1e7ee8a1b221b892eca
MD5 627f342e8f00089ee304b66b5587eaaa
SHA1 0da922ebfd91dc85e6115256fe8e9330a6818e21
SHA512 f5a6a9b9ecf45c9ad0dae7b9fbc39941dce7d2551f44f2995bf619c0d4eed8e3deb2c272486f56f3216abc93f37604a8e6c5f8119798381b1ea75fdcfd25ae7b
SSDEEP 12288:sTtikKJgzocjjOnxWx4d65pLBS11vabZQ57QCxmba4J:s5ilJKvOnxKfTS11d1Qn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
878542fd526922b4a8dc11016386c49b5081e2b915acf1e7ee8a1b221b892eca

File Explorer

878542fd526922b4a8dc11016386c49b5081e2b915acf1e7ee8a1b221b892eca

.exe 538KB

878542fd526922b4a8dc11016386c49b5081e2b915acf1e7ee8a1b221b892eca

IMPHASH e51676de6f3a9ce9a85020c29e80284c
SHA256 878542fd526922b4a8dc11016386c49b5081e2b915acf1e7ee8a1b221b892eca
MD5 627f342e8f00089ee304b66b5587eaaa
SHA1 0da922ebfd91dc85e6115256fe8e9330a6818e21
SHA512 f5a6a9b9ecf45c9ad0dae7b9fbc39941dce7d2551f44f2995bf619c0d4eed8e3deb2c272486f56f3216abc93f37604a8e6c5f8119798381b1ea75fdcfd25ae7b
SSDEEP 12288:sTtikKJgzocjjOnxWx4d65pLBS11vabZQ57QCxmba4J:s5ilJKvOnxKfTS11d1Qn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

38109

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GetStringTypeA GetDriveTypeW GlobalCompact GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA InterlockedIncrement EnumCalendarInfoW GetCommState ZombifyActCtx GetNamedPipeHandleStateA MoveFileWithProgressA GetModuleHandleW GetTickCount EnumResourceTypesA SetProcessPriorityBoost GetEnvironmentStrings GlobalAlloc LoadLibraryW GetConsoleWindow InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetFileAttributesW GetBinaryTypeW GetOverlappedResult GetVolumePathNameA FindNextVolumeMountPointW SetTapePosition GetStringTypeExA GetPrivateProfileIntW GlobalUnfix GetLastError GetProcAddress CreateJobSet RemoveDirectoryA SetComputerNameA UnhandledExceptionFilter GetConsoleScreenBufferInfo LocalAlloc BeginUpdateResourceA SetThreadIdealProcessor GetPrivateProfileStructA GetModuleFileNameA FindNextFileA EnumDateFormatsA CreateMutexA FreeEnvironmentStringsW GetConsoleTitleW GetCPInfoExA SetCalendarInfoA SetFileShortNameA TerminateJobObject FindAtomW QueryDepthSList DebugBreak EnumSystemLocalesW DeleteFileA SetFilePointer WriteConsoleW FlushFileBuffers WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary SetStdHandle GetConsoleCP GetConsoleMode CreateFileW

user32

DefDlgProcA GetMenu

Sharing

General

Malware Config

Signatures

File Explorer

878542fd526922b4a8dc11016386c49b5081e2b915acf1e7ee8a1b221b892eca

kernel32

user32

generic