46855b6fb9f40620fe6689e106aafbfa2a87ff092f8f0d82729d2915300547a1

General

Target
46855b6fb9f40620fe6689e106aafbfa2a87ff092f8f0d82729d2915300547a1
Size 365KB
Sample230501-3lbayaha85
SHA256 46855b6fb9f40620fe6689e106aafbfa2a87ff092f8f0d82729d2915300547a1
MD5 2932eb1af19206a89b877d26235eaace
SHA1 bd5758fbc86e09ef2e726ab9a79239a87d8b2243
SHA512 3a3670b97c1913bb54f7aa68765757e450cb7f1b63cbed1eac2849c43cabd2681561321537cf53716479bcdd7091c36b3f312851c9b31170e5b21546dac1a7b8
SSDEEP 3072:9mRS+nzEPLEdqrBhBTjBM+ij0IJRsEjo4EjG5139TUc4EwSPpi5j65/SoSAXkKJH:ARSBTEdMHBM+IkEjo4tZUcxzRwgNH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46855b6fb9f40620fe6689e106aafbfa2a87ff092f8f0d82729d2915300547a1

File Explorer

46855b6fb9f40620fe6689e106aafbfa2a87ff092f8f0d82729d2915300547a1

.exe 365KB

46855b6fb9f40620fe6689e106aafbfa2a87ff092f8f0d82729d2915300547a1

IMPHASH ccdfcfe3b09ab1ac2d74e3c88d512281
SHA256 46855b6fb9f40620fe6689e106aafbfa2a87ff092f8f0d82729d2915300547a1
MD5 2932eb1af19206a89b877d26235eaace
SHA1 bd5758fbc86e09ef2e726ab9a79239a87d8b2243
SHA512 3a3670b97c1913bb54f7aa68765757e450cb7f1b63cbed1eac2849c43cabd2681561321537cf53716479bcdd7091c36b3f312851c9b31170e5b21546dac1a7b8
SSDEEP 3072:9mRS+nzEPLEdqrBhBTjBM+ij0IJRsEjo4EjG5139TUc4EwSPpi5j65/SoSAXkKJH:ARSBTEdMHBM+IkEjo4tZUcxzRwgNH
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17060

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject SetComputerNameW AddConsoleAliasW GetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesA GetNumberFormatA GetConsoleTitleA GetWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsA EnumTimeFormatsW CreateActCtxW SetProcessPriorityBoost FindResourceExA GetCalendarInfoW GetSystemWindowsDirectoryA FindNextVolumeW Beep GetConsoleFontSize lstrlenW GlobalUnlock GetShortPathNameA GetCPInfoExW SetLastError GetProcAddress GetLongPathNameA VirtualAlloc HeapSize IsBadHugeWritePtr QueryDosDeviceA EnumSystemCodePagesW SetThreadPriorityBoost LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc RemoveDirectoryW WriteProfileSectionW AddAtomA FindAtomA EnumResourceTypesW GetModuleFileNameA GetOEMCP GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW WriteConsoleOutputAttribute GetDiskFreeSpaceExW WriteFileEx DeleteTimerQueueTimer SuspendThread RaiseException GetModuleHandleA GetLocaleInfoA GetConsoleAliasA ReadConsoleA lstrlenA SystemTimeToFileTime BeginUpdateResourceW FindResourceA MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess GetCPInfo GetACP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

ToAsciiEx ChangeMenuA CharLowerBuffW CreateAcceleratorTableW GetWindowLongW GetSysColorBrush SetCaretPos ModifyMenuA IsCharAlphaNumericA GetKeyNameTextA

gdi32

GetCharWidthA GetCharABCWidthsW CreateHalftonePalette

advapi32

BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

46855b6fb9f40620fe6689e106aafbfa2a87ff092f8f0d82729d2915300547a1

kernel32

user32

gdi32

advapi32