5fb5dd9df272c0591c7fc375fb51f5d98ed4ffba17bb74530e1d1c01121faade

General

Target
5fb5dd9df272c0591c7fc375fb51f5d98ed4ffba17bb74530e1d1c01121faade
Size 1.2MB
Sample241111-hkl1tsvdrm
SHA256 5fb5dd9df272c0591c7fc375fb51f5d98ed4ffba17bb74530e1d1c01121faade
MD5 0f4cbe8c4da81bd1f0d58b2f5385f33a
SHA1 ac1a82d03f9d5f027327439ced87cb24787ba5f8
SHA512 fe96b0e89f172a933d67895d196038ac057dde592c6d568f48034f568588ea345a2ebead033bc4589a532874f8ae6dd19e178f45f55defa5094363dd607c54a8
SSDEEP 24576:4u0fRlKB2ZGPoUC1VqAUjfeEB7htX0yromAWB5HpS/gl:l0+BshUC1VzUjjPP0/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fb5dd9df272c0591c7fc375fb51f5d98ed4ffba17bb74530e1d1c01121faade

File Explorer

5fb5dd9df272c0591c7fc375fb51f5d98ed4ffba17bb74530e1d1c01121faade

.exe 1.2MB

5fb5dd9df272c0591c7fc375fb51f5d98ed4ffba17bb74530e1d1c01121faade

IMPHASH cbb199b85bd7e99e36eb212e7f14e32a
SHA256 5fb5dd9df272c0591c7fc375fb51f5d98ed4ffba17bb74530e1d1c01121faade
MD5 0f4cbe8c4da81bd1f0d58b2f5385f33a
SHA1 ac1a82d03f9d5f027327439ced87cb24787ba5f8
SHA512 fe96b0e89f172a933d67895d196038ac057dde592c6d568f48034f568588ea345a2ebead033bc4589a532874f8ae6dd19e178f45f55defa5094363dd607c54a8
SSDEEP 24576:4u0fRlKB2ZGPoUC1VqAUjfeEB7htX0yromAWB5HpS/gl:l0+BshUC1VzUjjPP0/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23751

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\guvanacopisem-puhalivadawid\maxawew.pdb

kernel32

FindResourceExW BackupSeek GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnlock GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA lstrlenA GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA AddAtomA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetCPInfoExA TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA HeapSize GetDateFormatW GetConsoleDisplayMode GetComputerNameA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

5fb5dd9df272c0591c7fc375fb51f5d98ed4ffba17bb74530e1d1c01121faade

kernel32

user32

gdi32

generic