8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e

General

Target
8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e
Size 368KB
Sample230501-wtnsnsca69
SHA256 8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e
MD5 2a33a553561a087bf533ab90fe85d897
SHA1 5603a199ff14817cfa3cb21c32bc5e775dcb2414
SHA512 300b30a401c4a169cc7af393009bf3a1f40c5b8b6216f5274233f0b837c27e76851c7d4a7c61df353075fd04b61a5da6c18d9c5f34d6a7248f153ec2696244ca
SSDEEP 3072:Yu/GBnvEbvMqpaH3aSLbW123OxUR391gcoF3zLP4+K5TaDTFhrRck+:F/GerJaHrbf//1ghPpoaFb+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e

File Explorer

8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e

.exe 368KB

8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e

IMPHASH 203b54dd7cb5052a152152d37aa392da
SHA256 8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e
MD5 2a33a553561a087bf533ab90fe85d897
SHA1 5603a199ff14817cfa3cb21c32bc5e775dcb2414
SHA512 300b30a401c4a169cc7af393009bf3a1f40c5b8b6216f5274233f0b837c27e76851c7d4a7c61df353075fd04b61a5da6c18d9c5f34d6a7248f153ec2696244ca
SSDEEP 3072:Yu/GBnvEbvMqpaH3aSLbW123OxUR391gcoF3zLP4+K5TaDTFhrRck+:F/GerJaHrbf//1ghPpoaFb+
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17220

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject SetComputerNameW AddConsoleAliasW GetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesA GetNumberFormatA GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsW CreateActCtxW SetProcessPriorityBoost FindResourceExA GetCalendarInfoW GetSystemWindowsDirectoryA FindNextVolumeW Beep WriteConsoleW GetConsoleFontSize lstrlenW GlobalUnlock GetShortPathNameA GetCPInfoExW SetLastError GetProcAddress GetLongPathNameA VirtualAlloc HeapSize IsBadHugeWritePtr GetConsoleAliasA EnumSystemCodePagesW SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd LocalAlloc RemoveDirectoryW QueryDosDeviceW WriteProfileSectionW AddAtomA FindAtomA EnumResourceTypesW GetModuleFileNameA GetOEMCP GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW WriteConsoleOutputAttribute GetDiskFreeSpaceExW WriteFileEx DeleteTimerQueueTimer SuspendThread RaiseException GetModuleHandleA GetLocaleInfoA ReadConsoleA lstrlenA SystemTimeToFileTime BeginUpdateResourceW FindResourceA MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess GetCPInfo GetACP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

ToAsciiEx ChangeMenuA CharLowerBuffW CreateAcceleratorTableW GetWindowLongW GetSysColorBrush SetCaretPos ModifyMenuA IsCharAlphaNumericA GetKeyNameTextA

gdi32

CreateHalftonePalette GetCharABCWidthsW GetCharWidthW

advapi32

BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e

kernel32

user32

gdi32

advapi32