793b6814613ac0759feeafaeba3c86d993341ef5016aa59fd95215da32b960ad

General

Target
793b6814613ac0759feeafaeba3c86d993341ef5016aa59fd95215da32b960ad
Size 64KB
Sample230712-bcjr6sbd55
SHA256 793b6814613ac0759feeafaeba3c86d993341ef5016aa59fd95215da32b960ad
MD5 ac904998f150e6eee818f4e22ef5d28c
SHA1 0105c0b76422abeb3dae57a3f2ab18691c811a94
SHA512 1b950d73c4eb68e439e8b2eee2dccdf0a7389650f9fe77dde5bafaf34ddffc50dd63f1baf92b0d2b1ff5f1a9007278ac3465c5193953c2ff3ac966906ca99d1e
SSDEEP 768:5pww1GpN62YFBGkw8PGObwaADg2EHb/ICaLsVgmFj9o2eNeTNAVYR:cwgD653Gkw5ewR6MC317o2eTk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
793b6814613ac0759feeafaeba3c86d993341ef5016aa59fd95215da32b960ad

File Explorer

793b6814613ac0759feeafaeba3c86d993341ef5016aa59fd95215da32b960ad

.dll 64KB

793b6814613ac0759feeafaeba3c86d993341ef5016aa59fd95215da32b960ad

IMPHASH 982b55eb63f51858ab5dbdb343dfc3f3
SHA256 793b6814613ac0759feeafaeba3c86d993341ef5016aa59fd95215da32b960ad
MD5 ac904998f150e6eee818f4e22ef5d28c
SHA1 0105c0b76422abeb3dae57a3f2ab18691c811a94
SHA512 1b950d73c4eb68e439e8b2eee2dccdf0a7389650f9fe77dde5bafaf34ddffc50dd63f1baf92b0d2b1ff5f1a9007278ac3465c5193953c2ff3ac966906ca99d1e
SSDEEP 768:5pww1GpN62YFBGkw8PGObwaADg2EHb/ICaLsVgmFj9o2eNeTNAVYR:cwgD653Gkw5ewR6MC317o2eTk
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28584

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetTempPathA GetSystemDirectoryA GetWindowsDirectoryA GetVersionExA SetSystemPowerState GetLastError GetCurrentProcess MultiByteToWideChar WideCharToMultiByte HeapFree HeapReAlloc GetProcessHeap HeapAlloc InterlockedIncrement InterlockedDecrement GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA LoadLibraryA GetProcAddress VirtualAlloc RtlUnwind GetCommandLineA GetVersion GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue ExitProcess TerminateProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetModuleHandleA GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree WriteFile SetUnhandledExceptionFilter IsBadReadPtr IsBadWritePtr IsBadCodePtr InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP

user32

EnableWindow ExitWindowsEx SetForegroundWindow SetActiveWindow GetActiveWindow IsWindow GetForegroundWindow IsWindowEnabled GetParent

advapi32

LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken

shell32

SHGetMalloc SHFileOperationA SHGetSpecialFolderPathA ShellExecuteA SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA

ole32

CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

793b6814613ac0759feeafaeba3c86d993341ef5016aa59fd95215da32b960ad

kernel32

user32

advapi32

shell32

ole32