86efe8458f19b9bdf9243150354534218832b27d2b31ace6a2a13df256e5d8cb

General

Target
86efe8458f19b9bdf9243150354534218832b27d2b31ace6a2a13df256e5d8cb
Size 1.0MB
Sample241110-bp1lfswfqa
SHA256 86efe8458f19b9bdf9243150354534218832b27d2b31ace6a2a13df256e5d8cb
MD5 a8e3639ecb4a500fc6f2f945ee422113
SHA1 b36e4b9c41c9e3a2c32cf5e9b901e66ee046d991
SHA512 43795977a81d1d411380b41ff51933a8365a3399973733fa5b3a9ee7ecf01a697f488aaaf7eab1110196f263f3ae85109f9da65baa3fa58d44ce25c787abae34
SSDEEP 24576:YcIu58c6Od3W36hmxGaKc1HIcf0ErjxO+TtR1N2VRDrcG3:omZ6Od3WqFaKc1Hh8ErdOWR1N2fDrc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86efe8458f19b9bdf9243150354534218832b27d2b31ace6a2a13df256e5d8cb

File Explorer

86efe8458f19b9bdf9243150354534218832b27d2b31ace6a2a13df256e5d8cb

.exe 1.0MB

86efe8458f19b9bdf9243150354534218832b27d2b31ace6a2a13df256e5d8cb

IMPHASH cbb199b85bd7e99e36eb212e7f14e32a
SHA256 86efe8458f19b9bdf9243150354534218832b27d2b31ace6a2a13df256e5d8cb
MD5 a8e3639ecb4a500fc6f2f945ee422113
SHA1 b36e4b9c41c9e3a2c32cf5e9b901e66ee046d991
SHA512 43795977a81d1d411380b41ff51933a8365a3399973733fa5b3a9ee7ecf01a697f488aaaf7eab1110196f263f3ae85109f9da65baa3fa58d44ce25c787abae34
SSDEEP 24576:YcIu58c6Od3W36hmxGaKc1HIcf0ErjxO+TtR1N2VRDrcG3:omZ6Od3WqFaKc1Hh8ErdOWR1N2fDrc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23767

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nal vexe.pdb

kernel32

FindResourceExW BackupSeek GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnlock GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA lstrlenA GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA AddAtomA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetCPInfoExA TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA HeapSize GetDateFormatW GetConsoleDisplayMode GetComputerNameA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

86efe8458f19b9bdf9243150354534218832b27d2b31ace6a2a13df256e5d8cb

kernel32

user32

gdi32

generic