5d192752f52851d5f724cdbc6d69f560942dae759892ea72f7225ceddef357dc[.]exe

General

Target
5d192752f52851d5f724cdbc6d69f560942dae759892ea72f7225ceddef357dc.exe
Size 683KB
Sample260824-l2v7lseq8x
SHA256 5d192752f52851d5f724cdbc6d69f560942dae759892ea72f7225ceddef357dc
MD5 54617b340cd2b0bb2e89ecb20f11ece1
SHA1 e9d505621ee71e1dba49f14e45c6cbbb980f46a6
SHA512 3e347604440c92b584c5f6c75830037255c5a6fe9b855410065ed5306e4dde3688974c90d83dd5c4338bed8169bd6df8c68329e36e5a198b7b276a797bfc6df1
SSDEEP 12288:Jh2/R7Tye06Tgh0LYc0N68ProhMmreWWyGMftQE32aNcFmu2Pt7:JIRvyeChgYcUlWldGMftQE32a5uqt7
TLSH
T168E4125376A19172F1BB413016B4C1693B7B38726B69DC9F3740097B1E603D0AFAE78A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d192752f52851d5f724cdbc6d69f560942dae759892ea72f7225ceddef357dc.exe

File Explorer

5d192752f52851d5f724cdbc6d69f560942dae759892ea72f7225ceddef357dc.exe

.exe 683KB

5d192752f52851d5f724cdbc6d69f560942dae759892ea72f7225ceddef357dc.exe

IMPHASH 14847603ce0b1d0fbb55d8f9c5541c97
SHA256 5d192752f52851d5f724cdbc6d69f560942dae759892ea72f7225ceddef357dc
MD5 54617b340cd2b0bb2e89ecb20f11ece1
SHA1 e9d505621ee71e1dba49f14e45c6cbbb980f46a6
SHA512 3e347604440c92b584c5f6c75830037255c5a6fe9b855410065ed5306e4dde3688974c90d83dd5c4338bed8169bd6df8c68329e36e5a198b7b276a797bfc6df1
SSDEEP 12288:Jh2/R7Tye06Tgh0LYc0N68ProhMmreWWyGMftQE32aNcFmu2Pt7:JIRvyeChgYcUlWldGMftQE32a5uqt7
TLSH
T168E4125376A19172F1BB413016B4C1693B7B38726B69DC9F3740097B1E603D0AFAE78A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

24682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW WriteConsoleOutputCharacterW lstrlenA GetLocaleInfoA SetLocalTime GetDriveTypeW CommConfigDialogA MapUserPhysicalPages GetConsoleAliasA GetCurrentActCtx SetDefaultCommConfigW GetModuleHandleExW WriteConsoleInputA OpenSemaphoreA GetSystemDefaultLCID _lclose CreateNamedPipeW GenerateConsoleCtrlEvent FindNextVolumeMountPointA GetConsoleAliasesA GetWindowsDirectoryA GetCompressedFileSizeW GetConsoleAliasExesW WaitNamedPipeW GetCommandLineA GetEnvironmentStrings LoadLibraryW CopyFileW _hread EnumSystemCodePagesA GetFileAttributesW ReplaceFileW ReadFile QueryInformationJobObject CompareStringW lstrlenW FindResourceA SetConsoleTitleA GetShortPathNameA EnumSystemLocalesA GetLastError GetCurrentDirectoryW SetLastError ReadConsoleOutputCharacterA AttachConsole VerLanguageNameA SetVolumeLabelW RemoveDirectoryA CopyFileA SetComputerNameA GetProcessVersion UnhandledExceptionFilter LocalAlloc MoveFileA CreateEventW GetCommMask SetThreadIdealProcessor AddAtomA FoldStringW FindNextFileA GetModuleHandleA GetCommTimeouts lstrcatW VirtualProtect GetFileTime QueryPerformanceFrequency ReadConsoleInputW FindAtomW MoveFileWithProgressW GlobalAddAtomW ResetWriteWatch DeleteFileA lstrcpyA CreateFileW GetStartupInfoW GetTempFileNameW WriteConsoleW FlushFileBuffers WideCharToMultiByte HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer EncodePointer HeapReAlloc GetCommandLineW HeapSetInformation IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection WriteFile GetModuleFileNameW Sleep HeapSize CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode RaiseException RtlUnwind SetStdHandle

user32

CharUpperW

advapi32

AbortSystemShutdownA

winhttp

WinHttpWriteData

Sharing