1c4f890d7542fd5161294de86d99531eaaab2f2f7385408af5583f8b24fdc2a6

General

Target
1c4f890d7542fd5161294de86d99531eaaab2f2f7385408af5583f8b24fdc2a6
Size 342KB
Sample230810-mqm8asca33
SHA256 1c4f890d7542fd5161294de86d99531eaaab2f2f7385408af5583f8b24fdc2a6
MD5 afe0c6a7bbc9c1f9ec761c6f48a8e96b
SHA1 41c810784c2dac775a6e8baa7a555a6c64e4d99a
SHA512 f092aa70b171e1c35ee780cfc538a287df9d3fd3de9cb90459b7fcb1c7656e45e58255f2a96d7323704cfd259fc604acf33db62bb596816e665dde07b0fe213b
SSDEEP 6144:Haz3jF4UbK5w2nEiR+FD1yrb8GSuhf9aDlOtwS:HaDaUgwuEiR+FD1yrb8Gd8DCwS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c4f890d7542fd5161294de86d99531eaaab2f2f7385408af5583f8b24fdc2a6

File Explorer

1c4f890d7542fd5161294de86d99531eaaab2f2f7385408af5583f8b24fdc2a6

.exe 342KB

1c4f890d7542fd5161294de86d99531eaaab2f2f7385408af5583f8b24fdc2a6

IMPHASH 2572586e136b281ef1e194e86e338987
SHA256 1c4f890d7542fd5161294de86d99531eaaab2f2f7385408af5583f8b24fdc2a6
MD5 afe0c6a7bbc9c1f9ec761c6f48a8e96b
SHA1 41c810784c2dac775a6e8baa7a555a6c64e4d99a
SHA512 f092aa70b171e1c35ee780cfc538a287df9d3fd3de9cb90459b7fcb1c7656e45e58255f2a96d7323704cfd259fc604acf33db62bb596816e665dde07b0fe213b
SSDEEP 6144:Haz3jF4UbK5w2nEiR+FD1yrb8GSuhf9aDlOtwS:HaDaUgwuEiR+FD1yrb8Gd8DCwS
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14568

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDriveTypeW _llseek InterlockedIncrement MoveFileExW OpenJobObjectA InterlockedDecrement GetLogicalDriveStringsW GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize OpenSemaphoreA FreeEnvironmentStringsA MoveFileWithProgressA GetTickCount GenerateConsoleCtrlEvent GetConsoleAliasExesW WaitNamedPipeW GetDateFormatA EnumTimeFormatsW GetUserDefaultLangID GetCommandLineA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA _hread GetCalendarInfoW GetConsoleAliasExesLengthW DeleteVolumeMountPointW GetFileAttributesA GetExitCodeProcess GetTimeFormatW SetConsoleMode GetConsoleAliasW TerminateProcess LocalHandle GetSystemDirectoryA lstrcatA SetInformationJobObject GetPrivateProfileIntW GetStartupInfoA OpenMutexW GetHandleInformation GetCurrentDirectoryW SetLastError ReadConsoleOutputCharacterA GetProcAddress PeekConsoleInputW MoveFileW OpenWaitableTimerA LoadLibraryA InterlockedExchangeAdd GetFileType BuildCommDCBAndTimeoutsW GetNumberFormatW SetCurrentDirectoryW GlobalGetAtomNameW AddAtomA CreateIoCompletionPort GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW CreateMailslotA EnumDateFormatsW QueryPerformanceFrequency GetUserDefaultUILanguage EndUpdateResourceA GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DebugBreak ResetWriteWatch EnumSystemLocalesW DeleteFileA SetProcessAffinityMask GetStartupInfoW GetComputerNameA GetLastError WideCharToMultiByte MoveFileA HeapFree HeapAlloc GetCommandLineW HeapSetInformation GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection SetFilePointer GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW Sleep IsProcessorFeaturePresent RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapReAlloc HeapSize ReadFile WriteConsoleW CloseHandle CreateFileW RaiseException

gdi32

GetTextFaceW GetCharWidthA

Sharing

General

Malware Config

Signatures

File Explorer

1c4f890d7542fd5161294de86d99531eaaab2f2f7385408af5583f8b24fdc2a6

kernel32

gdi32