e5d23a3bb61b99e227bb8cbfc0e7f1e40fea34aac4dcb80acc925cfd7e3d18ec

Target
e5d23a3bb61b99e227bb8cbfc0e7f1e40fea34aac4dcb80acc925cfd7e3d18ec
Size 535KB
Sample260615-txvdhsfw2q
SHA256 e5d23a3bb61b99e227bb8cbfc0e7f1e40fea34aac4dcb80acc925cfd7e3d18ec
MD5 e713658b666ff04c9863ebecb458f174
SHA1 8b1d4ae7cbc6c0fa0705122b9556745670863214
SHA512 0fda0036f8dcd54755ad292e68ba16e2cebd06f208474b38afee94c6b2c0ea1b706cca1303e08c50cbb3b56526502a7bf5764cf17c647844bd9736e06f451d99
SSDEEP 6144:LF/tSwpj0Z4pJYpXeWJpexKegQ9atd99xB1OIEF78a:Fcwpj0qkpOWJpexKegQ9E99lmFIa
TLSH
T157C4BD0272E58031F5F702B3057DAB1156BFBD725B355ACB6BC8194E8A745C1AB32B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5d23a3bb61b99e227bb8cbfc0e7f1e40fea34aac4dcb80acc925cfd7e3d18ec

File Explorer

e5d23a3bb61b99e227bb8cbfc0e7f1e40fea34aac4dcb80acc925cfd7e3d18ec

.exe 535KB

e5d23a3bb61b99e227bb8cbfc0e7f1e40fea34aac4dcb80acc925cfd7e3d18ec

IMPHASH e21f0e282ec2c45086deaf35464275b4
SHA256 e5d23a3bb61b99e227bb8cbfc0e7f1e40fea34aac4dcb80acc925cfd7e3d18ec
MD5 e713658b666ff04c9863ebecb458f174
SHA1 8b1d4ae7cbc6c0fa0705122b9556745670863214
SHA512 0fda0036f8dcd54755ad292e68ba16e2cebd06f208474b38afee94c6b2c0ea1b706cca1303e08c50cbb3b56526502a7bf5764cf17c647844bd9736e06f451d99
SSDEEP 6144:LF/tSwpj0Z4pJYpXeWJpexKegQ9atd99xB1OIEF78a:Fcwpj0qkpOWJpexKegQ9E99lmFIa
TLSH
T157C4BD0272E58031F5F702B3057DAB1156BFBD725B355ACB6BC8194E8A745C1AB32B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33796

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo lstrlenA lstrlenW CreateEventA GetModuleHandleA ExpandEnvironmentStringsW WritePrivateProfileStructA GetDriveTypeA MoveFileA FindClose VerifyVersionInfoA RemoveVectoredExceptionHandler GetCurrencyFormatW FillConsoleOutputCharacterA GetConsoleAliasExesLengthW CloseHandle WriteConsoleW SetStdHandle FlushFileBuffers SetCriticalSectionSpinCount CreateRemoteThread GetLongPathNameA VirtualProtect LocalAlloc CreateNamedPipeA GetProcAddress EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent GetLastError HeapAlloc HeapFree ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThread GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW SetConsoleCtrlHandler GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FatalAppExitA FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx OutputDebugStringW GetStringTypeW CreateFileW

user32

GetTabbedTextExtentW GetMessageExtraInfo SetPropA

advapi32

DuplicateTokenEx MapGenericMask AreAllAccessesGranted GetKernelObjectSecurity CloseEventLog RegDeleteKeyA

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

e5d23a3bb61b99e227bb8cbfc0e7f1e40fea34aac4dcb80acc925cfd7e3d18ec

kernel32

user32

advapi32

generic