4e5e1ade814b15b47ae3ce93c3bab4a88ce8111164ae4b4a5d9dd8d877e64fcc

General

Target
4e5e1ade814b15b47ae3ce93c3bab4a88ce8111164ae4b4a5d9dd8d877e64fcc
Size 85KB
Sample260815-hya6gsee57
SHA256 4e5e1ade814b15b47ae3ce93c3bab4a88ce8111164ae4b4a5d9dd8d877e64fcc
MD5 d114e2a71247aa26bf1d393406d9484c
SHA1 fcaed3805bd8637811a9bad234986f03c6b26631
SHA512 9eb6512c75ab857af890da229fda46f01102a9b6d2cfcd6569aea9617cabee12461936126cc8c8a9b11cf35e3bdc767ce9c6c46e835d1e3ac7e833ea9d00a5ee
SSDEEP 1536:lQNk8rEoYUrnArOxOswV5rd4Em8P2ANnhiKHEbobRhGACgdsWlfcdwMrxltGh5z:lQJr81OAzHm8BhiKHEdACHwMrxl0h5
TLSH
T17A837C1071D1C075DABE18391428D679AB7D7950DFE09DEB27950AAE4F302C0EF35E2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e5e1ade814b15b47ae3ce93c3bab4a88ce8111164ae4b4a5d9dd8d877e64fcc

File Explorer

4e5e1ade814b15b47ae3ce93c3bab4a88ce8111164ae4b4a5d9dd8d877e64fcc

.dll 85KB

4e5e1ade814b15b47ae3ce93c3bab4a88ce8111164ae4b4a5d9dd8d877e64fcc

IMPHASH efcf65b73c1ba36a6ea062e3600ef71c
SHA256 4e5e1ade814b15b47ae3ce93c3bab4a88ce8111164ae4b4a5d9dd8d877e64fcc
MD5 d114e2a71247aa26bf1d393406d9484c
SHA1 fcaed3805bd8637811a9bad234986f03c6b26631
SHA512 9eb6512c75ab857af890da229fda46f01102a9b6d2cfcd6569aea9617cabee12461936126cc8c8a9b11cf35e3bdc767ce9c6c46e835d1e3ac7e833ea9d00a5ee
SSDEEP 1536:lQNk8rEoYUrnArOxOswV5rd4Em8P2ANnhiKHEbobRhGACgdsWlfcdwMrxltGh5z:lQJr81OAzHm8BhiKHEdACHwMrxl0h5
TLSH
T17A837C1071D1C075DABE18391428D679AB7D7950DFE09DEB27950AAE4F302C0EF35E2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7251

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

gdi32

RemoveFontResourceExW AddFontResourceExW

user32

SetMenuItemInfoW GetMenuItemCount GetMenuItemID GetSubMenu SetWindowTextW

kernel32

WriteConsoleW CloseHandle CreateFileW GetLastError GetCurrentProcess FlushInstructionCache GetSystemDirectoryW VirtualProtect DisableThreadLibraryCalls FreeLibrary GetModuleFileNameW GetModuleHandleW GetProcAddress LoadLibraryW lstrcpynA lstrlenW MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW SetFilePointerEx InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

4e5e1ade814b15b47ae3ce93c3bab4a88ce8111164ae4b4a5d9dd8d877e64fcc

gdi32

user32

kernel32

generic