d885f65a9ce48c9239080cbcc5f74744259bdad1dd963dda13948ea9c294489d

General

Target
d885f65a9ce48c9239080cbcc5f74744259bdad1dd963dda13948ea9c294489d
Size 390KB
Sample230804-3pqvssgb41
SHA256 d885f65a9ce48c9239080cbcc5f74744259bdad1dd963dda13948ea9c294489d
MD5 a0ad82474baf7bc4a088d79b9f6561f0
SHA1 953ef4caaeaa27088192e5e9aa0b684c19b419ba
SHA512 33255ad77e082cf2c8b11f6454405c7fd9f5f5cd8e69edfda23b021fa7ac86c1b0a5c52f17eddeb2c2fbcb28f3c7301f1b2f8020825f86e443ef56ad2103b178
SSDEEP 6144:MzOBkIbNW8Nl9f1kTs8SYWbcRGhFe++/C90kbJ3fC:MyBkIR2THSFbBP9t3f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d885f65a9ce48c9239080cbcc5f74744259bdad1dd963dda13948ea9c294489d

File Explorer

d885f65a9ce48c9239080cbcc5f74744259bdad1dd963dda13948ea9c294489d

.exe 390KB

d885f65a9ce48c9239080cbcc5f74744259bdad1dd963dda13948ea9c294489d

IMPHASH 85ce740324cd186ebe76660c5a8bb101
SHA256 d885f65a9ce48c9239080cbcc5f74744259bdad1dd963dda13948ea9c294489d
MD5 a0ad82474baf7bc4a088d79b9f6561f0
SHA1 953ef4caaeaa27088192e5e9aa0b684c19b419ba
SHA512 33255ad77e082cf2c8b11f6454405c7fd9f5f5cd8e69edfda23b021fa7ac86c1b0a5c52f17eddeb2c2fbcb28f3c7301f1b2f8020825f86e443ef56ad2103b178
SSDEEP 6144:MzOBkIbNW8Nl9f1kTs8SYWbcRGhFe++/C90kbJ3fC:MyBkIR2THSFbBP9t3f
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA ConvertThreadToFiber InterlockedIncrement MoveFileExW GetConsoleAliasA GetSystemWindowsDirectoryW HeapFree GetUserDefaultLCID FlushConsoleInputBuffer OpenSemaphoreA FreeEnvironmentStringsA _lclose VirtualFree GenerateConsoleCtrlEvent GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA WaitNamedPipeW EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetConsoleMode TerminateThread _hread GetPrivateProfileStructW GetCalendarInfoA GetConsoleAliasExesLengthW DeleteVolumeMountPointW GetTimeFormatW GetFileAttributesW WritePrivateProfileSectionW TerminateProcess QueryInformationJobObject GetOverlappedResult GetStartupInfoW CreateMutexW GetNamedPipeHandleStateW InterlockedExchange OpenMutexW GetHandleInformation GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress BackupWrite MoveFileW SetComputerNameA GlobalGetAtomNameA OpenWaitableTimerA InterlockedExchangeAdd LocalAlloc GetFileType BuildCommDCBAndTimeoutsW AddAtomW SetCurrentDirectoryW GetProfileStringA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW FatalAppExitA PeekConsoleInputA FindFirstVolumeA ReadConsoleInputW LocalSize GetVolumeNameForVolumeMountPointW DeleteFileW ReadConsoleOutputCharacterW OpenFileMappingA EnumSystemLocalesW DeleteFileA LCMapStringW GetComputerNameA SetProcessAffinityMask CreateMailslotW GetCommandLineW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc GetCommandLineA HeapSetInformation RaiseException RtlUnwind IsProcessorFeaturePresent HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetStringTypeW MultiByteToWideChar HeapReAlloc

user32

CharUpperA

gdi32

GetTextFaceA

advapi32

AccessCheckByTypeResultList

Sharing

General

Malware Config

Signatures

File Explorer

d885f65a9ce48c9239080cbcc5f74744259bdad1dd963dda13948ea9c294489d

kernel32

user32

gdi32

advapi32