4a5c55ccde112d37cacac44e44b9dea894299902f10a9c6ca4505b145019fdd1

General

Target
4a5c55ccde112d37cacac44e44b9dea894299902f10a9c6ca4505b145019fdd1
Size 419KB
Sample260320-slphfsax9r
SHA256 4a5c55ccde112d37cacac44e44b9dea894299902f10a9c6ca4505b145019fdd1
MD5 05b4b94fe502b06454e6fe20b6965c76
SHA1 bfa65de4bbea7bf16322882eb0cbb0909efcf0db
SHA512 04fdecb2f567d7268d171b1e4131df618c2c2c6835adee13083d139cc6443d9868f5bd7cbaed1cc020f29c7bc8bf14b763012548c1e8fed152f4dc18083c413a
SSDEEP 6144:b09eBWBilriEAtxeSMikAX9cCaQ0POiFNVqjzwFYGONlsah/rOd2A:b0ABN9CxeSMFQ0WiFLqjmONFh/rOdv
TLSH
T13D94AF4392E17C54E9278732DE2EC6E9371EB9504E29376A3318AE9F24F01B1D163BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a5c55ccde112d37cacac44e44b9dea894299902f10a9c6ca4505b145019fdd1

File Explorer

4a5c55ccde112d37cacac44e44b9dea894299902f10a9c6ca4505b145019fdd1

.exe 419KB

4a5c55ccde112d37cacac44e44b9dea894299902f10a9c6ca4505b145019fdd1

IMPHASH bfe1d6ca43e611244ffe6ad8a6fa68ea
SHA256 4a5c55ccde112d37cacac44e44b9dea894299902f10a9c6ca4505b145019fdd1
MD5 05b4b94fe502b06454e6fe20b6965c76
SHA1 bfa65de4bbea7bf16322882eb0cbb0909efcf0db
SHA512 04fdecb2f567d7268d171b1e4131df618c2c2c6835adee13083d139cc6443d9868f5bd7cbaed1cc020f29c7bc8bf14b763012548c1e8fed152f4dc18083c413a
SSDEEP 6144:b09eBWBilriEAtxeSMikAX9cCaQ0POiFNVqjzwFYGONlsah/rOd2A:b0ABN9CxeSMFQ0WiFLqjmONFh/rOdv
TLSH
T13D94AF4392E17C54E9278732DE2EC6E9371EB9504E29376A3318AE9F24F01B1D163BD1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

260403

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW SetEnvironmentVariableW CreateJobObjectW SetComputerNameW CreateHardLinkA GetModuleHandleW EnumCalendarInfoExW FindNextVolumeMountPointA GetNumberFormatA GetWindowsDirectoryA GetConsoleAliasExesW SetCommState LoadLibraryW GetLocaleInfoW ReadConsoleInputA GetCalendarInfoW CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetVersionExW GetFileAttributesA EnumSystemCodePagesA GetTimeFormatW GetModuleFileNameW CreateActCtxA GetEnvironmentVariableA SetThreadPriority GetTempPathW VerifyVersionInfoW GlobalUnfix GetStdHandle GetLastError GetCurrentDirectoryW GetLongPathNameW GetCurrentProcess CreateNamedPipeA LoadModule GlobalFree GetProcessVersion LoadLibraryA InterlockedExchangeAdd CreateFileMappingA LocalAlloc SetCalendarInfoW FoldStringW EnumDateFormatsA GlobalUnWire GetProcessShutdownParameters LoadLibraryExA GetFileTime WaitForDebugEvent OpenEventW GetShortPathNameW SetFileShortNameA GetDiskFreeSpaceExW LCMapStringW CommConfigDialogW CreateFileW GetStringTypeW MultiByteToWideChar CloseHandle WriteConsoleW FlushFileBuffers InterlockedDecrement EnumCalendarInfoW InterlockedIncrement SetEndOfFile TlsGetValue GetProcAddress SetDefaultCommConfigA SetStdHandle HeapAlloc EncodePointer DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess ExitProcess WriteFile HeapCreate Sleep HeapSize HeapFree SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind

user32

GetWindowLongW SetCaretPos LoadMenuA InsertMenuItemW GetMenu CharUpperA CharLowerBuffA GetSysColor GetMenuStringA

gdi32

GetBkMode GetCharWidthFloatA CreateDCA GetCharWidth32W GetTextCharset GetCharWidthI

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

4a5c55ccde112d37cacac44e44b9dea894299902f10a9c6ca4505b145019fdd1

kernel32

user32

gdi32

winhttp

generic