5a810b7aed3a92eaa810dd18bcaa64dc[.]exe

General

Target
5a810b7aed3a92eaa810dd18bcaa64dc.exe
Size 329KB
Sample250108-klez1svmck
SHA256 b205b2786150adc187b4e621abf50db6c8008b6bb14b57c01fbf37c021e36c36
MD5 5a810b7aed3a92eaa810dd18bcaa64dc
SHA1 4d2bce13b0dee6983d5e6e011aeb24411654bc7e
SHA512 b4206388c6aec3d81cd1b488bfa1f0028be6e631c8d1eb8b6324fdc1a1a82d84175cae76e97186a9232938bfaea3adc323a1783058c282b18417a676ca416a22
SSDEEP 6144:ILFPg1G26tZ2ztYtjnPgG2c952DR0GC+Ar2SkE:IJPWG26H2ztYtjIJc9lZdip
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a810b7aed3a92eaa810dd18bcaa64dc.exe

File Explorer

5a810b7aed3a92eaa810dd18bcaa64dc.exe

.exe 329KB

5a810b7aed3a92eaa810dd18bcaa64dc.exe

IMPHASH 3b10e24f8c96c961a509c2761fac0068
SHA256 b205b2786150adc187b4e621abf50db6c8008b6bb14b57c01fbf37c021e36c36
MD5 5a810b7aed3a92eaa810dd18bcaa64dc
SHA1 4d2bce13b0dee6983d5e6e011aeb24411654bc7e
SHA512 b4206388c6aec3d81cd1b488bfa1f0028be6e631c8d1eb8b6324fdc1a1a82d84175cae76e97186a9232938bfaea3adc323a1783058c282b18417a676ca416a22
SSDEEP 6144:ILFPg1G26tZ2ztYtjnPgG2c952DR0GC+Ar2SkE:IJPWG26H2ztYtjIJc9lZdip
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16977

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA EnumCalendarInfoA WriteConsoleInputW InterlockedIncrement InterlockedDecrement GetCurrentProcess SetComputerNameW FindNextVolumeMountPointA EnumTimeFormatsW SetCommConfig GetVersionExW FindNextVolumeW GetAtomNameW InterlockedExchange GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW EnumDateFormatsW OpenEventW GetShortPathNameW ReadConsoleInputW TerminateJobObject GetWindowsDirectoryW GetCurrentProcessId OpenFileMappingA EnumCalendarInfoExA SwitchToThread CreateFileA CloseHandle GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep HeapSize ExitProcess HeapFree SetFilePointer WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RaiseException SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW

user32

OemToCharA DdeQueryStringA GetWindowTextLengthA

shell32

DragFinish

Sharing