aacc6a6512230da99d11da39e9f8b97fbfc294aea6b7d6886e92e0320e5a3f42

General

Target
aacc6a6512230da99d11da39e9f8b97fbfc294aea6b7d6886e92e0320e5a3f42
Size 784KB
Sample230806-nvf58abc8x
SHA256 aacc6a6512230da99d11da39e9f8b97fbfc294aea6b7d6886e92e0320e5a3f42
MD5 0fbce6debfbb32468144dc9190d7ba1f
SHA1 3bd3c0199a8e724a87d2212b728816132a0f1ce2
SHA512 b1d90b66b2b7319ca12af9efa9fa446ce261925d1df3800c0b83f1d74f787efe1588ffc9231b49a97969f7bff860262f90f6b2f2134eb31d1f7296f845058f13
SSDEEP 12288:dojH0LAqV797dE/lDNxoqGTAnHrb+ofhOTrRkiM03PObXHi:dor0LAK97dEHmkHHloTm7AK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aacc6a6512230da99d11da39e9f8b97fbfc294aea6b7d6886e92e0320e5a3f42

File Explorer

aacc6a6512230da99d11da39e9f8b97fbfc294aea6b7d6886e92e0320e5a3f42

.exe 784KB

aacc6a6512230da99d11da39e9f8b97fbfc294aea6b7d6886e92e0320e5a3f42

IMPHASH 497066eb74b90edfec949c6dfd6acab4
SHA256 aacc6a6512230da99d11da39e9f8b97fbfc294aea6b7d6886e92e0320e5a3f42
MD5 0fbce6debfbb32468144dc9190d7ba1f
SHA1 3bd3c0199a8e724a87d2212b728816132a0f1ce2
SHA512 b1d90b66b2b7319ca12af9efa9fa446ce261925d1df3800c0b83f1d74f787efe1588ffc9231b49a97969f7bff860262f90f6b2f2134eb31d1f7296f845058f13
SSDEEP 12288:dojH0LAqV797dE/lDNxoqGTAnHrb+ofhOTrRkiM03PObXHi:dor0LAK97dEHmkHHloTm7AK
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32989

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

_llseek DeleteVolumeMountPointA InterlockedIncrement MoveFileExW GetConsoleAliasA GetUserDefaultLCID FlushConsoleInputBuffer GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent GetNumberFormatA GetConsoleAliasExesW WaitNamedPipeW GetDateFormatA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetConsoleMode TerminateThread _hread GetCalendarInfoA GetConsoleAliasExesLengthW GetTimeFormatW GetFileAttributesW WritePrivateProfileSectionW TerminateProcess QueryInformationJobObject GetOverlappedResult GetStartupInfoW CreateMailslotW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA CreateMutexW GetHandleInformation GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress PeekConsoleInputW MoveFileW GlobalGetAtomNameA OpenWaitableTimerA InterlockedExchangeAdd LocalAlloc GetFileType BuildCommDCBAndTimeoutsW AddAtomW SetCurrentDirectoryW GetProfileStringA OpenJobObjectW GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW QueryPerformanceFrequency OpenSemaphoreW ReadConsoleInputW LocalSize GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW MoveFileWithProgressW DebugBreak ResetWriteWatch ReadConsoleOutputCharacterW TlsFree EnumSystemLocalesW DeleteFileA GetComputerNameA SetProcessAffinityMask OpenMutexW GetCommandLineW InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree HeapAlloc GetCommandLineA HeapSetInformation RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc

gdi32

GetTextFaceA

advapi32

AccessCheckByTypeResultList

Sharing

General

Malware Config

Signatures

File Explorer

aacc6a6512230da99d11da39e9f8b97fbfc294aea6b7d6886e92e0320e5a3f42

kernel32

gdi32

advapi32