789b970969f98a9d8ae92cf3dde88fa8e18f7fbf10b2c5dabf803b56b118896b

General

Target
789b970969f98a9d8ae92cf3dde88fa8e18f7fbf10b2c5dabf803b56b118896b
Size 381KB
Sample230504-slb75afb3s
SHA256 789b970969f98a9d8ae92cf3dde88fa8e18f7fbf10b2c5dabf803b56b118896b
MD5 a63cbb45124478ddeed3a7856c868bd9
SHA1 385b27d663f16874062281ad7f7fb18c80cf35a9
SHA512 8b91dae2b556e1280e742e7479a00014472a76dc909471561bdde524c8e9ce04155c1db7c8278caa2b72f60bb17aef6b4f4da82c76f54fce048f78793e14ba0a
SSDEEP 3072:L+3Fzu1WkN352w12VYzjwT1fMzLxvzY11x1m0l9a676mb0nAcj5hL4UvRfj7x//s:K3Fuh+wcdwLxvk116y9aRIAcMRBtHu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
789b970969f98a9d8ae92cf3dde88fa8e18f7fbf10b2c5dabf803b56b118896b

File Explorer

789b970969f98a9d8ae92cf3dde88fa8e18f7fbf10b2c5dabf803b56b118896b

.exe 381KB

789b970969f98a9d8ae92cf3dde88fa8e18f7fbf10b2c5dabf803b56b118896b

IMPHASH 82d4ec7a516183ee24f7bd73d142b27f
SHA256 789b970969f98a9d8ae92cf3dde88fa8e18f7fbf10b2c5dabf803b56b118896b
MD5 a63cbb45124478ddeed3a7856c868bd9
SHA1 385b27d663f16874062281ad7f7fb18c80cf35a9
SHA512 8b91dae2b556e1280e742e7479a00014472a76dc909471561bdde524c8e9ce04155c1db7c8278caa2b72f60bb17aef6b4f4da82c76f54fce048f78793e14ba0a
SSDEEP 3072:L+3Fzu1WkN352w12VYzjwT1fMzLxvzY11x1m0l9a676mb0nAcj5hL4UvRfj7x//s:K3Fuh+wcdwLxvk116y9aRIAcMRBtHu
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25164

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddConsoleAliasW GetComputerNameW GetModuleHandleW GetNumberFormatA ReadConsoleW EnumTimeFormatsA EnumResourceTypesA SetProcessPriorityBoost ActivateActCtx GetCalendarInfoA GetSystemWindowsDirectoryA HeapCreate EnumSystemCodePagesA FindNextVolumeW GetConsoleAliasW Beep GetModuleFileNameW GetConsoleFontSize CreateActCtxA GetACP lstrlenW GlobalUnlock GetShortPathNameA EnumSystemLocalesA GetConsoleAliasesW GetCPInfoExW SetLastError GetProcAddress GetLongPathNameA VirtualAlloc SetComputerNameW IsBadHugeWritePtr BeginUpdateResourceW WriteProfileSectionA RemoveDirectoryA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc AddAtomW QueryDosDeviceW WriteProfileSectionW FindAtomA GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW GetDiskFreeSpaceExW GetWindowsDirectoryW DeleteTimerQueueTimer GetTempPathA EnumCalendarInfoExA SuspendThread CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP SetStdHandle FlushFileBuffers GetModuleHandleA WaitForSingleObject GetCurrentActCtx ReadConsoleA lstrlenA FindResourceExW HeapSize InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess GetCPInfo GetOEMCP IsValidCodePage SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetFilePointer GetConsoleCP GetConsoleMode

user32

ToAsciiEx ChangeMenuA CharLowerBuffW SetParent CreateAcceleratorTableW GetWindowLongA GetSysColorBrush GetKeyNameTextW GetMenuInfo

gdi32

GetCharWidthA GetColorAdjustment GetCharABCWidthsW

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

789b970969f98a9d8ae92cf3dde88fa8e18f7fbf10b2c5dabf803b56b118896b

kernel32

user32

gdi32

advapi32