74a434ab27dee2234cc149fa8d34c6d5af5beaa0060ffad7523fde8ec923f983

General

Target
74a434ab27dee2234cc149fa8d34c6d5af5beaa0060ffad7523fde8ec923f983
Size 495KB
Sample230807-gntpeadh35
SHA256 74a434ab27dee2234cc149fa8d34c6d5af5beaa0060ffad7523fde8ec923f983
MD5 4c224ad23e402d58bbd23023bf883dc0
SHA1 67cbaf4b24ccf90ca845626d1ed97831ef0dd55b
SHA512 5aad2b848d6098c8cdbf58ce115ac832826e82f803aaaca5625197c445d3849f6cb256aaeeebed4bd3a5b0db92f0f957ee5de79312f4fc4b9769f8deae0b5766
SSDEEP 12288:hwp22VqKfpoJfgq+mugd256TJzxpQodc5X:hwp26PfOJfgbmBT5c5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74a434ab27dee2234cc149fa8d34c6d5af5beaa0060ffad7523fde8ec923f983

File Explorer

74a434ab27dee2234cc149fa8d34c6d5af5beaa0060ffad7523fde8ec923f983

.exe 495KB

74a434ab27dee2234cc149fa8d34c6d5af5beaa0060ffad7523fde8ec923f983

IMPHASH 497066eb74b90edfec949c6dfd6acab4
SHA256 74a434ab27dee2234cc149fa8d34c6d5af5beaa0060ffad7523fde8ec923f983
MD5 4c224ad23e402d58bbd23023bf883dc0
SHA1 67cbaf4b24ccf90ca845626d1ed97831ef0dd55b
SHA512 5aad2b848d6098c8cdbf58ce115ac832826e82f803aaaca5625197c445d3849f6cb256aaeeebed4bd3a5b0db92f0f957ee5de79312f4fc4b9769f8deae0b5766
SSDEEP 12288:hwp22VqKfpoJfgq+mugd256TJzxpQodc5X:hwp26PfOJfgbmBT5c5
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32989

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

_llseek DeleteVolumeMountPointA InterlockedIncrement MoveFileExW GetConsoleAliasA GetUserDefaultLCID FlushConsoleInputBuffer GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent GetNumberFormatA GetConsoleAliasExesW WaitNamedPipeW GetDateFormatA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetConsoleMode TerminateThread _hread GetCalendarInfoA GetConsoleAliasExesLengthW GetTimeFormatW GetFileAttributesW WritePrivateProfileSectionW TerminateProcess QueryInformationJobObject GetOverlappedResult GetStartupInfoW CreateMailslotW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA CreateMutexW GetHandleInformation GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress PeekConsoleInputW MoveFileW GlobalGetAtomNameA OpenWaitableTimerA InterlockedExchangeAdd LocalAlloc GetFileType BuildCommDCBAndTimeoutsW AddAtomW SetCurrentDirectoryW GetProfileStringA OpenJobObjectW GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW QueryPerformanceFrequency OpenSemaphoreW ReadConsoleInputW LocalSize GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW MoveFileWithProgressW DebugBreak ResetWriteWatch ReadConsoleOutputCharacterW TlsFree EnumSystemLocalesW DeleteFileA GetComputerNameA SetProcessAffinityMask OpenMutexW GetCommandLineW InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree HeapAlloc GetCommandLineA HeapSetInformation RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc

gdi32

GetTextFaceA

advapi32

AccessCheckByTypeResultList

Sharing

General

Malware Config

Signatures

File Explorer

74a434ab27dee2234cc149fa8d34c6d5af5beaa0060ffad7523fde8ec923f983

kernel32

gdi32

advapi32