960df7d3c618c90075d56b4da9d86a6a00fd8f8b48622fda33938e04356b08e7

General

Target
960df7d3c618c90075d56b4da9d86a6a00fd8f8b48622fda33938e04356b08e7
Size 321KB
Sample230812-rgt2psea2s
SHA256 960df7d3c618c90075d56b4da9d86a6a00fd8f8b48622fda33938e04356b08e7
MD5 b2cea271a9a86385fd6a9fed011763c6
SHA1 87708f998dc9764ec0a795d86c25bbc82b542521
SHA512 381129c51bd8d88aefd44b6e64b50200334b5b5af5b48492c005c2a7b6fee89d863cef7840fae4ebba1fb7f6af19d7686ecdb0eb40a9b1cd338b392d45f10d2f
SSDEEP 6144:1U92WLc38mkQbr0/WH+HHikm1//ozCkE2LG1K0lnOq:+JY38mZcuH+nikU/z2GnlP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960df7d3c618c90075d56b4da9d86a6a00fd8f8b48622fda33938e04356b08e7

File Explorer

960df7d3c618c90075d56b4da9d86a6a00fd8f8b48622fda33938e04356b08e7

.exe 321KB

960df7d3c618c90075d56b4da9d86a6a00fd8f8b48622fda33938e04356b08e7

IMPHASH f14eb02bc6e4e96d4b116ed67da9e223
SHA256 960df7d3c618c90075d56b4da9d86a6a00fd8f8b48622fda33938e04356b08e7
MD5 b2cea271a9a86385fd6a9fed011763c6
SHA1 87708f998dc9764ec0a795d86c25bbc82b542521
SHA512 381129c51bd8d88aefd44b6e64b50200334b5b5af5b48492c005c2a7b6fee89d863cef7840fae4ebba1fb7f6af19d7686ecdb0eb40a9b1cd338b392d45f10d2f
SSDEEP 6144:1U92WLc38mkQbr0/WH+HHikm1//ozCkE2LG1K0lnOq:+JY38mZcuH+nikU/z2GnlP
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26010

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA WriteConsoleInputW GetConsoleAliasesLengthW InterlockedIncrement InterlockedCompareExchange GetTickCount GetCurrentThread CreateActCtxW LoadLibraryW ReadConsoleInputA TransactNamedPipe GetNamedPipeInfo HeapValidate GetACP DisconnectNamedPipe GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress GetDateFormatW LoadLibraryA DeleteTimerQueue Module32FirstW FoldStringW CreatePipe EnumResourceTypesW FindNextFileA HeapSetInformation UpdateResourceW TlsAlloc AreFileApisANSI WriteConsoleW GetConsoleOutputCP WriteConsoleA VirtualAlloc GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetFilePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage WideCharToMultiByte CloseHandle CreateFileA GetModuleHandleA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetEndOfFile GetProcessHeap ReadFile

user32

LoadMenuA CharLowerBuffW CreateAcceleratorTableA CharToOemBuffW CharUpperBuffW

gdi32

GetColorAdjustment

Sharing

General

Malware Config

Signatures

File Explorer

960df7d3c618c90075d56b4da9d86a6a00fd8f8b48622fda33938e04356b08e7

kernel32

user32

gdi32