5a1f84ec4d12273d3382547f4515e40abba1a9b9273c5efd4eca39d41758c406[.]exe

General

Target
5a1f84ec4d12273d3382547f4515e40abba1a9b9273c5efd4eca39d41758c406.exe
Size 21KB
Sample250127-sky1hatret
SHA256 5a1f84ec4d12273d3382547f4515e40abba1a9b9273c5efd4eca39d41758c406
MD5 45dbbc28eacbc57a096b2cf73ffdaa9f
SHA1 77de3d209e864a306339691a9804f08f77493615
SHA512 8034b92e9cdf8461bca6ca6546fd52b794e63bc624bcd64c243547076bdac340c58a9375440faf72fec4e0b47b0b90d3390ad992734b88ed4dfb17ffe9932489
SSDEEP 384:eJp6UriiUE4yL+DfKVnss2OF3trr9L1XhyoIX8swxqAtiYOTa4ZOuWrBeUWdgC8v:gH4Q+DfKN33trZphBLZqAYYOu4RHNtc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a1f84ec4d12273d3382547f4515e40abba1a9b9273c5efd4eca39d41758c406.exe

File Explorer

5a1f84ec4d12273d3382547f4515e40abba1a9b9273c5efd4eca39d41758c406.exe

.exe 21KB

5a1f84ec4d12273d3382547f4515e40abba1a9b9273c5efd4eca39d41758c406.exe

IMPHASH 9e4683def9f4497c47282b066fd8888b
SHA256 5a1f84ec4d12273d3382547f4515e40abba1a9b9273c5efd4eca39d41758c406
MD5 45dbbc28eacbc57a096b2cf73ffdaa9f
SHA1 77de3d209e864a306339691a9804f08f77493615
SHA512 8034b92e9cdf8461bca6ca6546fd52b794e63bc624bcd64c243547076bdac340c58a9375440faf72fec4e0b47b0b90d3390ad992734b88ed4dfb17ffe9932489
SSDEEP 384:eJp6UriiUE4yL+DfKVnss2OF3trr9L1XhyoIX8swxqAtiYOTa4ZOuWrBeUWdgC8v:gH4Q+DfKN33trZphBLZqAYYOu4RHNtc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

11942

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

dpnsvr.pdb

kernel32

DeleteCriticalSection CreateMutexW CreateEventW ReleaseMutex WaitForSingleObject UnmapViewOfFile MapViewOfFile CreateFileMappingW InterlockedDecrement QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter SetEvent GetStartupInfoW GetTickCount InitializeCriticalSectionAndSpinCount CreateSemaphoreW ReleaseSemaphore OpenEventW lstrcpyW LeaveCriticalSection LoadLibraryW GetProcAddress FreeLibrary GetVersionExW GetModuleHandleW EnterCriticalSection OpenProcess GetLastError CloseHandle InterlockedIncrement lstrlenW CompareStringW HeapFree GetProcessHeap HeapAlloc

ole32

CoUninitialize CoInitializeEx CoCreateGuid StringFromGUID2 CoCreateInstance

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode _adjust_fdiv __setusermatherr _initterm __wgetmainargs _wcmdln exit _cexit _XcptFilter _exit _c_exit wcslen __p__commode srand wcscpy

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey CryptAcquireContextW CryptReleaseContext RegCreateKeyExW

user32

wsprintfW

winmm

timeGetTime

Sharing