793c5832f007199c128dcb5a56bdb600d9edb69731fcf4769b102dcf4b434c13

General

Target
793c5832f007199c128dcb5a56bdb600d9edb69731fcf4769b102dcf4b434c13
Size 312KB
Sample230807-teekcaga29
SHA256 793c5832f007199c128dcb5a56bdb600d9edb69731fcf4769b102dcf4b434c13
MD5 d7f301c6cba9d944f7cd046297ecda42
SHA1 db6332ca315dd948f432cda88d5bc023706ba1af
SHA512 fd4b6758f19da28ebc4ebba9d8167decd3bacdeea73687ed2a7a0038fd52cfe43621a592959fef4907f60918cfb53f65ead357b3b13102cdfd82b5eab197923c
SSDEEP 6144:IziLa4MxNEC/Xi8+1Jxua5ZDCtZd6JfWZRb:19MxOSc13PDQHp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
793c5832f007199c128dcb5a56bdb600d9edb69731fcf4769b102dcf4b434c13

File Explorer

793c5832f007199c128dcb5a56bdb600d9edb69731fcf4769b102dcf4b434c13

.exe 312KB

793c5832f007199c128dcb5a56bdb600d9edb69731fcf4769b102dcf4b434c13

IMPHASH 041d48491af33996afda7a32ee725dc6
SHA256 793c5832f007199c128dcb5a56bdb600d9edb69731fcf4769b102dcf4b434c13
MD5 d7f301c6cba9d944f7cd046297ecda42
SHA1 db6332ca315dd948f432cda88d5bc023706ba1af
SHA512 fd4b6758f19da28ebc4ebba9d8167decd3bacdeea73687ed2a7a0038fd52cfe43621a592959fef4907f60918cfb53f65ead357b3b13102cdfd82b5eab197923c
SSDEEP 6144:IziLa4MxNEC/Xi8+1Jxua5ZDCtZd6JfWZRb:19MxOSc13PDQHp
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18297

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GetDateFormatW SearchPathW TlsGetValue UpdateResourceA HeapFree InterlockedCompareExchange ConnectNamedPipe GetTickCount GetCurrentThread GetWindowsDirectoryA ReadConsoleOutputA LoadLibraryW GetLocaleInfoW TransactNamedPipe GetNamedPipeInfo CreateActCtxA DisconnectNamedPipe GetConsoleAliasesW InterlockedExchange GetProfileIntA Module32First FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc DeleteTimerQueue FindNextChangeNotification FoldStringA EnumResourceTypesW GetOEMCP GetModuleHandleA HeapSetInformation CreateMutexA PurgeComm ReadConsoleInputW LocalFree AreFileApisANSI WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetACP IsValidCodePage WriteFile GetStdHandle GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW CloseHandle CreateFileA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle SetEndOfFile GetProcessHeap

user32

LoadMenuA CharUpperBuffA CreateAcceleratorTableA CharLowerBuffA CharToOemBuffA

Sharing

General

Malware Config

Signatures

File Explorer

793c5832f007199c128dcb5a56bdb600d9edb69731fcf4769b102dcf4b434c13

kernel32

user32