408d62cbf4789d9533230eff49b8b45c11b01fd8c8d6d65ec339725d7521a48c

General

Target
408d62cbf4789d9533230eff49b8b45c11b01fd8c8d6d65ec339725d7521a48c
Size 165KB
Sample230714-jaaeqacf43
SHA256 408d62cbf4789d9533230eff49b8b45c11b01fd8c8d6d65ec339725d7521a48c
MD5 a2f3d796dc2c2f474188db58d5ca7593
SHA1 dc88893abba370aab576dcc9bd60b5fc7bb5dd4e
SHA512 9a454f6eb65ef53baa5cff2e2dd3b4691e80acc37b78e27b4832a045420942425aa458243d3640fe9b3d5c756cfb8d65d7f828cd4b6633228a6500327c1f2b7c
SSDEEP 3072:RONnlLWEFpHEVITy9VG4Req0CFkIOomD7Pp65vOs2C:+lLWcpHuSM3IGFROokP2Om
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
408d62cbf4789d9533230eff49b8b45c11b01fd8c8d6d65ec339725d7521a48c

File Explorer

408d62cbf4789d9533230eff49b8b45c11b01fd8c8d6d65ec339725d7521a48c

.exe 165KB

408d62cbf4789d9533230eff49b8b45c11b01fd8c8d6d65ec339725d7521a48c

IMPHASH c6b23c9c77136c0217965b910816add2
SHA256 408d62cbf4789d9533230eff49b8b45c11b01fd8c8d6d65ec339725d7521a48c
MD5 a2f3d796dc2c2f474188db58d5ca7593
SHA1 dc88893abba370aab576dcc9bd60b5fc7bb5dd4e
SHA512 9a454f6eb65ef53baa5cff2e2dd3b4691e80acc37b78e27b4832a045420942425aa458243d3640fe9b3d5c756cfb8d65d7f828cd4b6633228a6500327c1f2b7c
SSDEEP 3072:RONnlLWEFpHEVITy9VG4Req0CFkIOomD7Pp65vOs2C:+lLWcpHuSM3IGFROokP2Om
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17865

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA SetLocaleInfoA EnumCalendarInfoA EnumDateFormatsExW FindResourceW SetTapeParameters GetModuleHandleW GetTickCount GetConsoleAliasesA GetWindowsDirectoryA GetVolumePathNameW GlobalAlloc LoadLibraryW CopyFileW EnumSystemCodePagesA DisconnectNamedPipe FlushFileBuffers GetProfileIntA SetCurrentDirectoryA GetLastError SetLastError CreateMutexW LoadLibraryA OpenMutexA CreateHardLinkW BeginUpdateResourceA lstrcmpiW CreateMutexA VirtualProtect GetVersionExA ReadConsoleInputW FileTimeToLocalFileTime lstrcpyA CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW GetProcAddress GetComputerNameA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar ExitProcess GetStartupInfoW HeapFree RtlUnwind RaiseException WriteFile GetStdHandle GetModuleFileNameA HeapAlloc SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA

user32

CharToOemBuffA RealGetWindowClassW CharUpperBuffW GetMenuBarInfo LoadMenuA CharUpperA CharLowerBuffW DdeQueryStringW CharUpperBuffA GetClipboardOwner

advapi32

LogonUserW

Sharing

General

Malware Config

Signatures

File Explorer

408d62cbf4789d9533230eff49b8b45c11b01fd8c8d6d65ec339725d7521a48c

kernel32

user32

advapi32