fb1a8a846684778a595c5e53c0b3076b12d1f0cb1d23c94a0e3e5692a06b401c

Sharing

Copy URL Twitter E-mail

General

Target
fb1a8a846684778a595c5e53c0b3076b12d1f0cb1d23c94a0e3e5692a06b401c
Size 246KB
Sample230529-ls436abf3s
SHA256 fb1a8a846684778a595c5e53c0b3076b12d1f0cb1d23c94a0e3e5692a06b401c
MD5 93dbf7a1add7b91ba02069ec86bdea61
SHA1 7efbf4f54ec95e2ba5b8b4378b8231dc1f9608a4
SHA512 f4ce2d7f235c620d8be1f9a8194c9feea546a3bc8431c67fd7f23fd46778fb80cd0c1e5cfdf80d588663c0f769cfee74f871a2662c4c47cf9ab5ca4519f13b27
SSDEEP 3072:7wQJ5OqcHyHzkjRfG/BnjhCM4RIWmJGAg0FubpTBfb8xHTs92GTOlgNHrb3Y04Kh:UG5OqcHBG/BjUIaAO1TBz8xHkNiS76y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1a8a846684778a595c5e53c0b3076b12d1f0cb1d23c94a0e3e5692a06b401c

File Explorer

fb1a8a846684778a595c5e53c0b3076b12d1f0cb1d23c94a0e3e5692a06b401c

.dll 246KB

fb1a8a846684778a595c5e53c0b3076b12d1f0cb1d23c94a0e3e5692a06b401c

IMPHASH 56a6e184db572fc7d17cc0124217e6bb
SHA256 fb1a8a846684778a595c5e53c0b3076b12d1f0cb1d23c94a0e3e5692a06b401c
MD5 93dbf7a1add7b91ba02069ec86bdea61
SHA1 7efbf4f54ec95e2ba5b8b4378b8231dc1f9608a4
SHA512 f4ce2d7f235c620d8be1f9a8194c9feea546a3bc8431c67fd7f23fd46778fb80cd0c1e5cfdf80d588663c0f769cfee74f871a2662c4c47cf9ab5ca4519f13b27
SSDEEP 3072:7wQJ5OqcHyHzkjRfG/BnjhCM4RIWmJGAg0FubpTBfb8xHTs92GTOlgNHrb3Y04Kh:UG5OqcHBG/BjUIaAO1TBz8xHkNiS76y
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

52356

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathAppendW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

SetLastError TlsSetValue TlsFree InitializeSListHead QueryPerformanceCounter IsDebuggerPresent CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter EncodePointer DecodePointer LCMapStringW GetStringTypeW GetCPInfo RtlUnwind InterlockedFlushSList LoadLibraryExW SetFilePointerEx TlsAlloc IsProcessorFeaturePresent GetModuleFileNameA GetCurrentProcess CreateFileW GetCurrentThreadId CloseHandle GetFileType OutputDebugStringW WriteFile GetLastError GetFileAttributesExW OpenProcess MultiByteToWideChar WideCharToMultiByte WaitForSingleObject RaiseException GetSystemDirectoryW LoadLibraryW GetProcAddress GetStartupInfoW GetStdHandle GetVersionExW CreateProcessW GetModuleHandleW FreeLibrary GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount FindClose ExitProcess GetModuleHandleExW GetConsoleMode GetConsoleCP SetStdHandle HeapFree GetACP HeapAlloc HeapReAlloc TlsGetValue FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap WriteConsoleW FlushFileBuffers GetCurrentProcessId HeapSize

user32

GetWindowThreadProcessId FindWindowW IsWindow

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW RevertToSelf AllocateAndInitializeSid ImpersonateLoggedOnUser OpenProcessToken GetTokenInformation DuplicateTokenEx CheckTokenMembership FreeSid