82cb64835dc82e856e4afb4b3697953b470acf35394b2d0afebc21bc0f3599d2

General

Target
82cb64835dc82e856e4afb4b3697953b470acf35394b2d0afebc21bc0f3599d2
Size 1.0MB
Sample241110-beax2synhr
SHA256 82cb64835dc82e856e4afb4b3697953b470acf35394b2d0afebc21bc0f3599d2
MD5 461923431c4a32b3c17ad00a546cd685
SHA1 1ebeded506d836e8e7ffc70c8573a4db8bec9712
SHA512 57d4794d50446ea85705bf375f983797dfc6f1adc2398715e9c02d78a99750c664393eda23926401c8ebbb46262c1184b93df8fcc4ea15bd1ef31f1bbea0b60d
SSDEEP 24576:wcIu58c6Od3W36hmxGaKc1HIcf0ErjxO+TtR1N2VRDrcG3:wmZ6Od3WqFaKc1Hh8ErdOWR1N2fDrc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82cb64835dc82e856e4afb4b3697953b470acf35394b2d0afebc21bc0f3599d2

File Explorer

82cb64835dc82e856e4afb4b3697953b470acf35394b2d0afebc21bc0f3599d2

.exe 1.0MB

82cb64835dc82e856e4afb4b3697953b470acf35394b2d0afebc21bc0f3599d2

IMPHASH cbb199b85bd7e99e36eb212e7f14e32a
SHA256 82cb64835dc82e856e4afb4b3697953b470acf35394b2d0afebc21bc0f3599d2
MD5 461923431c4a32b3c17ad00a546cd685
SHA1 1ebeded506d836e8e7ffc70c8573a4db8bec9712
SHA512 57d4794d50446ea85705bf375f983797dfc6f1adc2398715e9c02d78a99750c664393eda23926401c8ebbb46262c1184b93df8fcc4ea15bd1ef31f1bbea0b60d
SSDEEP 24576:wcIu58c6Od3W36hmxGaKc1HIcf0ErjxO+TtR1N2VRDrcG3:wmZ6Od3WqFaKc1Hh8ErdOWR1N2fDrc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23767

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nal vexe.pdb

kernel32

FindResourceExW BackupSeek GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnlock GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA lstrlenA GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA AddAtomA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetCPInfoExA TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA HeapSize GetDateFormatW GetConsoleDisplayMode GetComputerNameA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

82cb64835dc82e856e4afb4b3697953b470acf35394b2d0afebc21bc0f3599d2

kernel32

user32

gdi32

generic