740fe7aa940c0e23a6bdb2cff01204f5a0dd66d158389b1fb6b4206076271e1d

General

Target
740fe7aa940c0e23a6bdb2cff01204f5a0dd66d158389b1fb6b4206076271e1d
Size 390KB
Sample230805-dp9kgafd48
SHA256 740fe7aa940c0e23a6bdb2cff01204f5a0dd66d158389b1fb6b4206076271e1d
MD5 4cbf6eb5f5920e11cab73dafe5e0e0b9
SHA1 5c15f06f971107cfa43edb07f11243092a3aeb9d
SHA512 613d075d13b6b49ab11a8f7d9aee503eb5c8c9d429d2c4983a348e8c9100731270fe4a12f8a25e74b1f00c15dca3036e3fc726fbe9dc10be2a1d9612338cf7d0
SSDEEP 3072:mUjNDfqjwwnfNkgtoVm1Tm3TzEpZOku1+vx7VXmvVnGbwklnOwhJGy1HihXL8+pa:/pGjwkNkOelTzE6jckvHkh9nGb9jcm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
740fe7aa940c0e23a6bdb2cff01204f5a0dd66d158389b1fb6b4206076271e1d

File Explorer

740fe7aa940c0e23a6bdb2cff01204f5a0dd66d158389b1fb6b4206076271e1d

.exe 390KB

740fe7aa940c0e23a6bdb2cff01204f5a0dd66d158389b1fb6b4206076271e1d

IMPHASH 85ce740324cd186ebe76660c5a8bb101
SHA256 740fe7aa940c0e23a6bdb2cff01204f5a0dd66d158389b1fb6b4206076271e1d
MD5 4cbf6eb5f5920e11cab73dafe5e0e0b9
SHA1 5c15f06f971107cfa43edb07f11243092a3aeb9d
SHA512 613d075d13b6b49ab11a8f7d9aee503eb5c8c9d429d2c4983a348e8c9100731270fe4a12f8a25e74b1f00c15dca3036e3fc726fbe9dc10be2a1d9612338cf7d0
SSDEEP 3072:mUjNDfqjwwnfNkgtoVm1Tm3TzEpZOku1+vx7VXmvVnGbwklnOwhJGy1HihXL8+pa:/pGjwkNkOelTzE6jckvHkh9nGb9jcm
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22680

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA ConvertThreadToFiber InterlockedIncrement MoveFileExW GetConsoleAliasA GetSystemWindowsDirectoryW HeapFree GetUserDefaultLCID FlushConsoleInputBuffer OpenSemaphoreA FreeEnvironmentStringsA _lclose VirtualFree GenerateConsoleCtrlEvent GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA WaitNamedPipeW EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetConsoleMode TerminateThread _hread GetPrivateProfileStructW GetCalendarInfoA GetConsoleAliasExesLengthW DeleteVolumeMountPointW GetTimeFormatW GetFileAttributesW WritePrivateProfileSectionW TerminateProcess QueryInformationJobObject GetOverlappedResult GetStartupInfoW CreateMutexW GetNamedPipeHandleStateW InterlockedExchange OpenMutexW GetHandleInformation GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress BackupWrite MoveFileW SetComputerNameA GlobalGetAtomNameA OpenWaitableTimerA InterlockedExchangeAdd LocalAlloc GetFileType BuildCommDCBAndTimeoutsW AddAtomW SetCurrentDirectoryW GetProfileStringA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW FatalAppExitA PeekConsoleInputA FindFirstVolumeA ReadConsoleInputW LocalSize GetVolumeNameForVolumeMountPointW DeleteFileW ReadConsoleOutputCharacterW OpenFileMappingA EnumSystemLocalesW DeleteFileA LCMapStringW GetComputerNameA SetProcessAffinityMask CreateMailslotW GetCommandLineW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc GetCommandLineA HeapSetInformation RaiseException RtlUnwind IsProcessorFeaturePresent HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetStringTypeW MultiByteToWideChar HeapReAlloc

user32

CharUpperA

gdi32

GetTextFaceA

advapi32

AccessCheckByTypeResultList

Sharing

General

Malware Config

Signatures

File Explorer

740fe7aa940c0e23a6bdb2cff01204f5a0dd66d158389b1fb6b4206076271e1d

kernel32

user32

gdi32

advapi32