fbda5ee9a8153d7dbf212771633558a1cc88a7dfcbd28f9cacebe47ebeccc47b

General

Target
fbda5ee9a8153d7dbf212771633558a1cc88a7dfcbd28f9cacebe47ebeccc47b
Size 385KB
Sample230805-vecw7adf66
SHA256 fbda5ee9a8153d7dbf212771633558a1cc88a7dfcbd28f9cacebe47ebeccc47b
MD5 2e04da78d260f0babb06e9f94ed10b89
SHA1 f140663f9e81c69a49bd2693b946a32ad1179500
SHA512 1b9907d0bd879cc1687cb0673ad16832058fca22688c8c93d3d2205b7c1caa4bd979bdb0422f72ded332d34766612b2002285b2630f678b7018b9f5d13f3db43
SSDEEP 6144:4zci/fdG6tcVs/GIZuSP0CVEepvfpy+8g4Gj41/d:4Ii/E6y6e+uSMCjpt8G6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbda5ee9a8153d7dbf212771633558a1cc88a7dfcbd28f9cacebe47ebeccc47b

File Explorer

fbda5ee9a8153d7dbf212771633558a1cc88a7dfcbd28f9cacebe47ebeccc47b

.exe 385KB

fbda5ee9a8153d7dbf212771633558a1cc88a7dfcbd28f9cacebe47ebeccc47b

IMPHASH 13af6b3f8b2cc343b7a99f8ff279e770
SHA256 fbda5ee9a8153d7dbf212771633558a1cc88a7dfcbd28f9cacebe47ebeccc47b
MD5 2e04da78d260f0babb06e9f94ed10b89
SHA1 f140663f9e81c69a49bd2693b946a32ad1179500
SHA512 1b9907d0bd879cc1687cb0673ad16832058fca22688c8c93d3d2205b7c1caa4bd979bdb0422f72ded332d34766612b2002285b2630f678b7018b9f5d13f3db43
SSDEEP 6144:4zci/fdG6tcVs/GIZuSP0CVEepvfpy+8g4Gj41/d:4Ii/E6y6e+uSMCjpt8G6
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22984

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement MoveFileExW GetConsoleAliasA HeapFree GetUserDefaultLCID FlushConsoleInputBuffer OpenSemaphoreA _lclose VirtualFree GenerateConsoleCtrlEvent GetNumberFormatA GetWindowsDirectoryA GetConsoleAliasExesW WaitNamedPipeW GetDateFormatA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetConsoleMode TerminateThread _hread GetPrivateProfileStructW GetCalendarInfoA GetConsoleAliasExesLengthW GetTimeFormatW GetFileAttributesW WritePrivateProfileSectionW TerminateProcess QueryInformationJobObject GetOverlappedResult GetStartupInfoW CreateMailslotW GetPrivateProfileIntW InterlockedExchange DeleteVolumeMountPointA GetHandleInformation GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress MoveFileW SetComputerNameA GlobalGetAtomNameA OpenWaitableTimerA InterlockedExchangeAdd LocalAlloc GetFileType BuildCommDCBAndTimeoutsW AddAtomW SetCurrentDirectoryW GetProfileStringA FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW QueryPerformanceFrequency PeekConsoleInputA ReadConsoleInputW LocalSize FindFirstVolumeW GetVolumeNameForVolumeMountPointW MoveFileWithProgressW ReadConsoleOutputCharacterW OpenFileMappingA TlsFree EnumSystemLocalesW DeleteFileA LCMapStringW GetComputerNameA SetProcessAffinityMask OpenMutexW GetCommandLineW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc GetCommandLineA HeapSetInformation RaiseException RtlUnwind IsProcessorFeaturePresent HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetStringTypeW MultiByteToWideChar HeapReAlloc

user32

CharUpperA

gdi32

GetTextFaceA

advapi32

AccessCheckByTypeResultList

Sharing

General

Malware Config

Signatures

File Explorer

fbda5ee9a8153d7dbf212771633558a1cc88a7dfcbd28f9cacebe47ebeccc47b

kernel32

user32

gdi32

advapi32