8a9d0e2c45e9bb11038f5844381731f87f91619409e607d9b2ec6c090300e501

General

Target
8a9d0e2c45e9bb11038f5844381731f87f91619409e607d9b2ec6c090300e501
Size 507KB
Sample241112-rfekmaxmam
SHA256 8a9d0e2c45e9bb11038f5844381731f87f91619409e607d9b2ec6c090300e501
MD5 a5a3218d0b4bbd662240891c9f13545d
SHA1 57d3a3dea0018ff27f6da14ebdd8c282bbe2278a
SHA512 506659e3f460d4b8ae0e00a15ea877a8883d5eb7cd2c56236bdd60dfcb2c986deab73e6d5c97ceb9bad31128a9195417b62fb0177c7398daf39eb9750750b18a
SSDEEP 12288:HEuUITmH96363hRRfMTy3D0ZzwdPrFB1PH:HRdT0t3hRayzdPrFB1P
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a9d0e2c45e9bb11038f5844381731f87f91619409e607d9b2ec6c090300e501

File Explorer

8a9d0e2c45e9bb11038f5844381731f87f91619409e607d9b2ec6c090300e501

.exe 507KB

8a9d0e2c45e9bb11038f5844381731f87f91619409e607d9b2ec6c090300e501

IMPHASH 618f8b789fbe1ba0f63925994447c3ef
SHA256 8a9d0e2c45e9bb11038f5844381731f87f91619409e607d9b2ec6c090300e501
MD5 a5a3218d0b4bbd662240891c9f13545d
SHA1 57d3a3dea0018ff27f6da14ebdd8c282bbe2278a
SHA512 506659e3f460d4b8ae0e00a15ea877a8883d5eb7cd2c56236bdd60dfcb2c986deab73e6d5c97ceb9bad31128a9195417b62fb0177c7398daf39eb9750750b18a
SSDEEP 12288:HEuUITmH96363hRRfMTy3D0ZzwdPrFB1PH:HRdT0t3hRayzdPrFB1P
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA HeapAlloc MoveFileExW GetConsoleAliasA SetDefaultCommConfigW GetSystemWindowsDirectoryW GlobalLock InterlockedCompareExchange SetCommBreak FreeEnvironmentStringsA GetModuleHandleW GetTickCount GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetStringTypeExW GetTimeFormatW SetConsoleCursorPosition WriteConsoleW GetConsoleFontSize GetACP GetStartupInfoW GetLocaleInfoA InterlockedExchange GetStdHandle GetLogicalDriveStringsA GetProcAddress SetFileAttributesA OpenWaitableTimerA UnhandledExceptionFilter MoveFileA GlobalHandle GetModuleFileNameA GetProcessAffinityMask BuildCommDCBA GetShortPathNameW FindAtomW FileTimeToLocalFileTime OpenFileMappingA DisconnectNamedPipe GetNumaNodeProcessorMask CreateFileA SetStdHandle MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError WriteFile DeleteCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile CloseHandle WriteConsoleA GetConsoleOutputCP SetFilePointer GetModuleHandleA

user32

GetClassLongW GetMonitorInfoW

gdi32

GetBoundsRect

Name

.text

Size

323KB

Virtual Size

323KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

58KB

Virtual Size

39.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.benipi

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

90KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8a9d0e2c45e9bb11038f5844381731f87f91619409e607d9b2ec6c090300e501

kernel32

user32

gdi32

generic