304193e9855af009019a5b4043e260e69d90cc533b0a7faa160f0e7e70ec495eN

General

Target
304193e9855af009019a5b4043e260e69d90cc533b0a7faa160f0e7e70ec495eN
Size 478KB
Sample241111-le8t7axcpr
SHA256 304193e9855af009019a5b4043e260e69d90cc533b0a7faa160f0e7e70ec495e
MD5 ac1d9e750400b9cfa81f6bea9174ecd0
SHA1 645369637e70ff9bbc9690173aa6364373411b78
SHA512 91ae14e30acdf8a4844b9361086dddcd86f67033e2efdbd32e497ca8beb7ac522d43fab25b6236fe6938418cf3730f758b2ba3f4882c1c678c991fa26bbc988b
SSDEEP 12288:O5RMJGm14hTKrh1kYTDbgzChsVhTd2FtUnUV:OnqGm1Frh1lM+hsVhTd2zUQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
304193e9855af009019a5b4043e260e69d90cc533b0a7faa160f0e7e70ec495eN

File Explorer

304193e9855af009019a5b4043e260e69d90cc533b0a7faa160f0e7e70ec495eN

.exe 478KB

304193e9855af009019a5b4043e260e69d90cc533b0a7faa160f0e7e70ec495eN

IMPHASH a1179765140463c0bdef01fcc8c985fc
SHA256 304193e9855af009019a5b4043e260e69d90cc533b0a7faa160f0e7e70ec495e
MD5 ac1d9e750400b9cfa81f6bea9174ecd0
SHA1 645369637e70ff9bbc9690173aa6364373411b78
SHA512 91ae14e30acdf8a4844b9361086dddcd86f67033e2efdbd32e497ca8beb7ac522d43fab25b6236fe6938418cf3730f758b2ba3f4882c1c678c991fa26bbc988b
SSDEEP 12288:O5RMJGm14hTKrh1kYTDbgzChsVhTd2FtUnUV:OnqGm1Frh1lM+hsVhTd2zUQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

43064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement QueryDosDeviceA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetTickCount GetConsoleAliasesLengthA SetCommState EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsProcessInJob GetConsoleAliasExesLengthW GetStringTypeExW GetConsoleAliasW GetFileAttributesW FindNextVolumeMountPointW SetTapePosition GetNamedPipeHandleStateW EnumSystemLocalesA CreateMutexW GetProcAddress BeginUpdateResourceW CreateJobSet UnhandledExceptionFilter BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FindAtomA FoldStringA GetModuleFileNameA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask SetFileShortNameA GetConsoleProcessList DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA WriteConsoleW FlushFileBuffers GetConsoleMode GetLastError GlobalFix SetStdHandle FreeLibrary WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler CreateFileW

user32

DefDlgProcA GetMenuBarInfo

advapi32

ReportEventW

shell32

FindExecutableA

Sharing

General

Malware Config

Signatures

File Explorer

304193e9855af009019a5b4043e260e69d90cc533b0a7faa160f0e7e70ec495eN

kernel32

user32

advapi32

shell32

generic