e5f2e3360cd1537cb51ed52552529237f96a94ab48b0a61d7933dd8aaf3eabab

Sharing

Copy URL Twitter E-mail

General

Target
e5f2e3360cd1537cb51ed52552529237f96a94ab48b0a61d7933dd8aaf3eabab
Size 94KB
Sample260729-lbh5cssyax
SHA256 e5f2e3360cd1537cb51ed52552529237f96a94ab48b0a61d7933dd8aaf3eabab
MD5 6ea59241819e81b01810d468e785b9c1
SHA1 874f1f4a29ae3b257c7eb5b17ae1c2a3e93085a3
SHA512 8b0c380315b0aa4cfbfb8d75035bff72075c867ba5241d7992a60f45dfd2d447267eca95fd6568a40bf1fd02b7047f8a24e6d0a0b03bb7cf8cba2321ac495008
SSDEEP 1536:eZArwhls+Lwf+XmMK8qYMDcfChdQ6aPEgzgJKelZmGOQICAltX8tFqNNU5feiga:eoylBnWl8+DcfodQ6aPEu2SGCvtX8tFr
TLSH
T1DC935B8BB3A460FAD02AC135C9929AC5E772BC661B71538F1775A39E2F333914E2D311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5f2e3360cd1537cb51ed52552529237f96a94ab48b0a61d7933dd8aaf3eabab

File Explorer

e5f2e3360cd1537cb51ed52552529237f96a94ab48b0a61d7933dd8aaf3eabab

.exe 94KB

e5f2e3360cd1537cb51ed52552529237f96a94ab48b0a61d7933dd8aaf3eabab

IMPHASH 8197a935291b582c03b7ec4819e62297
SHA256 e5f2e3360cd1537cb51ed52552529237f96a94ab48b0a61d7933dd8aaf3eabab
MD5 6ea59241819e81b01810d468e785b9c1
SHA1 874f1f4a29ae3b257c7eb5b17ae1c2a3e93085a3
SHA512 8b0c380315b0aa4cfbfb8d75035bff72075c867ba5241d7992a60f45dfd2d447267eca95fd6568a40bf1fd02b7047f8a24e6d0a0b03bb7cf8cba2321ac495008
SSDEEP 1536:eZArwhls+Lwf+XmMK8qYMDcfChdQ6aPEgzgJKelZmGOQICAltX8tFqNNU5feiga:eoylBnWl8+DcfodQ6aPEu2SGCvtX8tFr
TLSH
T1DC935B8BB3A460FAD02AC135C9929AC5E772BC661B71538F1775A39E2F333914E2D311
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30820

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WaitForSingleObject GetModuleFileNameW Sleep GetCurrentThreadId CreateThread CreateEventW SetEvent FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetCommandLineW CloseHandle Process32FirstW CreateToolhelp32Snapshot EnterCriticalSection LeaveCriticalSection Module32NextW Module32FirstW lstrcmpiW GetModuleHandleW GetProcAddress GetLastError DeleteCriticalSection InitializeCriticalSection RaiseException Process32NextW lstrlenW GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA WideCharToMultiByte GetLocaleInfoA InitializeCriticalSectionAndSpinCount LoadLibraryA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetOEMCP GetACP HeapAlloc HeapFree RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetStartupInfoW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSetInformation HeapCreate TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree SetLastError FlsAlloc HeapReAlloc HeapSize GetCPInfo

user32

CharNextW GetMessageW DispatchMessageW TranslateMessage PostThreadMessageW CharUpperW

advapi32

RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegEnumKeyExW

ole32

CoTaskMemAlloc CoRegisterClassObject CoTaskMemFree CoInitialize CoUninitialize CoTaskMemRealloc CoRevokeClassObject CoCreateInstance StringFromGUID2

oleaut32

LoadRegTypeLi SafeArrayLock SafeArrayGetUBound SafeArrayGetLBound SafeArrayUnlock VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysFreeString SysStringLen SafeArrayCreate

Sharing

General

Malware Config

Signatures

File Explorer

e5f2e3360cd1537cb51ed52552529237f96a94ab48b0a61d7933dd8aaf3eabab

kernel32

user32

advapi32

ole32

oleaut32

generic