da8b2ceff64640f1ab5c0acd225762994b9830d50a1db77f7da09ca6f4e33a2e

General

Target
da8b2ceff64640f1ab5c0acd225762994b9830d50a1db77f7da09ca6f4e33a2e
Size 1.8MB
Sample230716-jeej8sda53
SHA256 da8b2ceff64640f1ab5c0acd225762994b9830d50a1db77f7da09ca6f4e33a2e
MD5 d5c139fe384e12358c394790b740a429
SHA1 835188fc822341f9226c13412e00f45d666b85f2
SHA512 08c7781bfe816ff698e2b7cde8bf4a7c5581a2c7c372d1dc51375af5625b9b4132b380c2a2bdbc028f3ad3a02574baf312d1249acb26abc4585a3bfecc670506
SSDEEP 49152:c8ePKunHP5Iax4v+f2w0GVbTRvCO75Sc7RMP:cjKuN7vJ75LRs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da8b2ceff64640f1ab5c0acd225762994b9830d50a1db77f7da09ca6f4e33a2e

File Explorer

da8b2ceff64640f1ab5c0acd225762994b9830d50a1db77f7da09ca6f4e33a2e

.exe 1.8MB

da8b2ceff64640f1ab5c0acd225762994b9830d50a1db77f7da09ca6f4e33a2e

IMPHASH c55238e8720aed638c6e29c3199f0503
SHA256 da8b2ceff64640f1ab5c0acd225762994b9830d50a1db77f7da09ca6f4e33a2e
MD5 d5c139fe384e12358c394790b740a429
SHA1 835188fc822341f9226c13412e00f45d666b85f2
SHA512 08c7781bfe816ff698e2b7cde8bf4a7c5581a2c7c372d1dc51375af5625b9b4132b380c2a2bdbc028f3ad3a02574baf312d1249acb26abc4585a3bfecc670506
SSDEEP 49152:c8ePKunHP5Iax4v+f2w0GVbTRvCO75Sc7RMP:cjKuN7vJ75LRs
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18295

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetupComm CreateMutexW FindResourceA EnumCalendarInfoA GetConsoleAliasesLengthW EnumDateFormatsExW AddConsoleAliasW GetModuleHandleW GetTickCount GetConsoleAliasesA GetWindowsDirectoryA GlobalAlloc LoadLibraryW ReadConsoleInputA CopyFileW ReadFile GetVolumePathNameA lstrlenW DisconnectNamedPipe GetProfileIntA SetCurrentDirectoryA GetLastError SetLastError GetProcAddress BeginUpdateResourceW IsValidCodePage EnumSystemCodePagesW LoadLibraryA OpenMutexA lstrcmpiW SetLocaleInfoW CreateMutexA SetProcessShutdownParameters _lopen SetFileShortNameA GetVersionExA FileTimeToLocalFileTime AddConsoleAliasA lstrcpyA CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers LCMapStringW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree MultiByteToWideChar ExitProcess GetStartupInfoW RtlUnwind RaiseException WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA

user32

EnumDesktopWindows CharToOemBuffA CharUpperBuffW GetMenuBarInfo CharLowerBuffW UnhookWinEvent DdeQueryStringW CharUpperBuffA LoadMenuW LoadBitmapW SetClipboardViewer

Sharing

General

Malware Config

Signatures

File Explorer

da8b2ceff64640f1ab5c0acd225762994b9830d50a1db77f7da09ca6f4e33a2e

kernel32

user32