1e94917f53938c9cfd1e2121a3f303720bf219b311c8f56a4843d995a9b8b999

General

Target
1e94917f53938c9cfd1e2121a3f303720bf219b311c8f56a4843d995a9b8b999
Size 532KB
Sample260910-kphv3stvc1
SHA256 1e94917f53938c9cfd1e2121a3f303720bf219b311c8f56a4843d995a9b8b999
MD5 cfedc46b14dce0f0116d56a8da7e13f3
SHA1 a44e91ca08d82103db2b4a6326371b2e70d291d3
SHA512 7b3791c2bb8f0d00bcb9d034be0787c7236fcf4a23f1fc7c2f69d30c59b047be3e51a37858ef4ce73ee9ce1ea80bb7f90083355ad76c26a9b34c1829415eba55
SSDEEP 12288:njwhC/puQs99H2SkPnERkICmzeBO2N7jI0pO:jwhCVs99WSk8Rbg7bpO
TLSH
T15FC4D0117681C030D5A305334665CB42183EBD365FA67ACB67D86A2DEEF0AC2DA71B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e94917f53938c9cfd1e2121a3f303720bf219b311c8f56a4843d995a9b8b999

File Explorer

1e94917f53938c9cfd1e2121a3f303720bf219b311c8f56a4843d995a9b8b999

.exe 532KB

1e94917f53938c9cfd1e2121a3f303720bf219b311c8f56a4843d995a9b8b999

IMPHASH 50f8c2aaa5c7363385b763c509d8540d
SHA256 1e94917f53938c9cfd1e2121a3f303720bf219b311c8f56a4843d995a9b8b999
MD5 cfedc46b14dce0f0116d56a8da7e13f3
SHA1 a44e91ca08d82103db2b4a6326371b2e70d291d3
SHA512 7b3791c2bb8f0d00bcb9d034be0787c7236fcf4a23f1fc7c2f69d30c59b047be3e51a37858ef4ce73ee9ce1ea80bb7f90083355ad76c26a9b34c1829415eba55
SSDEEP 12288:njwhC/puQs99H2SkPnERkICmzeBO2N7jI0pO:jwhCVs99WSk8Rbg7bpO
TLSH
T15FC4D0117681C030D5A305334665CB42183EBD365FA67ACB67D86A2DEEF0AC2DA71B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

130339

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetProcAddress LoadLibraryW GetComputerNameW SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetLastError CloseHandle InitializeCriticalSectionAndSpinCount WideCharToMultiByte MoveFileW DeleteFileW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW CreateFileW GetFileSize ReadFile WriteFile GetComputerNameA GetModuleFileNameW CreateProcessW Sleep GetSystemTime FileTimeToLocalFileTime RaiseException HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap SetEndOfFile WriteConsoleW SetStdHandle ReadConsoleW OutputDebugStringW FreeLibrary InterlockedIncrement InterlockedDecrement MultiByteToWideChar GetStringTypeW InterlockedExchange EncodePointer DecodePointer GetCommandLineW GetCurrentThreadId LoadLibraryExW RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW GetStdHandle GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsDebuggerPresent GetConsoleCP GetConsoleMode IsValidCodePage GetACP GetOEMCP SetFilePointerEx FlushFileBuffers SetFilePointer LoadLibraryExA

ole32

CoCreateInstance CoInitialize

shlwapi

PathRemoveExtensionW PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW

Sharing

General

Malware Config

Signatures

File Explorer

1e94917f53938c9cfd1e2121a3f303720bf219b311c8f56a4843d995a9b8b999

kernel32

ole32

shlwapi

generic