5a45cfe0b266362b482cace7205c2c32[.]exe

General

Target
5a45cfe0b266362b482cace7205c2c32.exe
Size 403KB
Sample241126-1mlrys1nbw
SHA256 a0e267be6b982f374175ffc83be37b3fcf351cbd1e9ee899d02fb7c722c55c7b
MD5 5a45cfe0b266362b482cace7205c2c32
SHA1 29bdfb28ebeba5b07571898bf514e9f624606293
SHA512 03b613fef8c2c5e7136e3200d3d9097c7c0002acd6958a669fd078d1a7a78f5b62fe2afdd5c8609f9b64c5074f7d0012a3bcc6e86c917f601e5aab20fdfbbfdf
SSDEEP 6144:7MmB1z/wAu1tN0i1yZkdy3F4vLY5F5yp91gDO2t+ZGeS8y8PZ:7Mmrozj15IFMEypfQsGH8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a45cfe0b266362b482cace7205c2c32.exe

File Explorer

5a45cfe0b266362b482cace7205c2c32.exe

.exe 403KB

5a45cfe0b266362b482cace7205c2c32.exe

IMPHASH f6afe1d4f723ac968dae096d10844733
SHA256 a0e267be6b982f374175ffc83be37b3fcf351cbd1e9ee899d02fb7c722c55c7b
MD5 5a45cfe0b266362b482cace7205c2c32
SHA1 29bdfb28ebeba5b07571898bf514e9f624606293
SHA512 03b613fef8c2c5e7136e3200d3d9097c7c0002acd6958a669fd078d1a7a78f5b62fe2afdd5c8609f9b64c5074f7d0012a3bcc6e86c917f601e5aab20fdfbbfdf
SSDEEP 6144:7MmB1z/wAu1tN0i1yZkdy3F4vLY5F5yp91gDO2t+ZGeS8y8PZ:7Mmrozj15IFMEypfQsGH8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaNodeProcessorMask SetDefaultCommConfigA SetThreadContext GetLocaleInfoA WriteConsoleOutputCharacterA OpenJobObjectA GetConsoleAliasA InterlockedDecrement GetSystemWindowsDirectoryW GetModuleHandleW GetEnvironmentStrings LoadLibraryW GetProcessHandleCount GetConsoleAliasExesLengthW WriteConsoleOutputA GetTimeFormatW GetVolumePathNameA GetStringTypeExA GetConsoleAliasesW GetLastError GetProcAddress GetComputerNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc AddAtomA SetCommMask FindAtomA CreatePipe GetModuleFileNameA OpenFileMappingW BuildCommDCBA GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask GetSystemTime GetModuleHandleA MoveFileW GetCommandLineW HeapFree HeapAlloc HeapReAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc WriteFile GetStdHandle SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind MultiByteToWideChar GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CloseHandle GetConsoleOutputCP WriteConsoleW CreateFileA RaiseException

user32

GetClassLongA GetMonitorInfoA

advapi32

RegCreateKeyA

Sharing