3ec359f6ab125099db4a4f7b6ad6b17ab1411a338be932ea45aea13aad7788c8

General

Target
3ec359f6ab125099db4a4f7b6ad6b17ab1411a338be932ea45aea13aad7788c8
Size 165KB
Sample230714-hee1bscd87
SHA256 3ec359f6ab125099db4a4f7b6ad6b17ab1411a338be932ea45aea13aad7788c8
MD5 65ba8303fabfb2652158af69f7124772
SHA1 e7a679c504b8f00c995da10f1fa66fb6458832a2
SHA512 cc77310aa5caf21cfcfd318b97f804d565fb0ecb8ad6f3335bd9883a9c3db3d94e784b4b9ac54b04ee71172d62fb23e8b99de93237e9d798cb02d5359a83c5f0
SSDEEP 1536:A60Kb4AU8LOZvCHIUxjrFV4mgeViGtVUsauBwWraK4fWf1JDE9NQH4e5vozHxz4k:AN8LcUpUmgkiW6uvraRfgRE94h5vWsk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec359f6ab125099db4a4f7b6ad6b17ab1411a338be932ea45aea13aad7788c8

File Explorer

3ec359f6ab125099db4a4f7b6ad6b17ab1411a338be932ea45aea13aad7788c8

.exe 165KB

3ec359f6ab125099db4a4f7b6ad6b17ab1411a338be932ea45aea13aad7788c8

IMPHASH c6b23c9c77136c0217965b910816add2
SHA256 3ec359f6ab125099db4a4f7b6ad6b17ab1411a338be932ea45aea13aad7788c8
MD5 65ba8303fabfb2652158af69f7124772
SHA1 e7a679c504b8f00c995da10f1fa66fb6458832a2
SHA512 cc77310aa5caf21cfcfd318b97f804d565fb0ecb8ad6f3335bd9883a9c3db3d94e784b4b9ac54b04ee71172d62fb23e8b99de93237e9d798cb02d5359a83c5f0
SSDEEP 1536:A60Kb4AU8LOZvCHIUxjrFV4mgeViGtVUsauBwWraK4fWf1JDE9NQH4e5vozHxz4k:AN8LcUpUmgkiW6uvraRfgRE94h5vWsk
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17849

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA SetLocaleInfoA EnumCalendarInfoA EnumDateFormatsExW FindResourceW SetTapeParameters GetModuleHandleW GetTickCount GetConsoleAliasesA GetWindowsDirectoryA GetVolumePathNameW GlobalAlloc LoadLibraryW CopyFileW EnumSystemCodePagesA DisconnectNamedPipe FlushFileBuffers GetProfileIntA SetCurrentDirectoryA GetLastError SetLastError CreateMutexW LoadLibraryA OpenMutexA CreateHardLinkW BeginUpdateResourceA lstrcmpiW CreateMutexA VirtualProtect GetVersionExA ReadConsoleInputW FileTimeToLocalFileTime lstrcpyA CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW GetProcAddress GetComputerNameA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar ExitProcess GetStartupInfoW HeapFree RtlUnwind RaiseException WriteFile GetStdHandle GetModuleFileNameA HeapAlloc SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA

user32

CharToOemBuffA RealGetWindowClassW CharUpperBuffW GetMenuBarInfo LoadMenuA CharUpperA CharLowerBuffW DdeQueryStringW CharUpperBuffA GetClipboardOwner

advapi32

LogonUserW

Sharing

General

Malware Config

Signatures

File Explorer

3ec359f6ab125099db4a4f7b6ad6b17ab1411a338be932ea45aea13aad7788c8

kernel32

user32

advapi32