fb5ee7b40e1e2cbb4b49908e3e3b83954ec5b5d5e6b31c13de133c396ec49601

General

Target
fb5ee7b40e1e2cbb4b49908e3e3b83954ec5b5d5e6b31c13de133c396ec49601
Size 346KB
Sample230813-zz8a2sec35
SHA256 fb5ee7b40e1e2cbb4b49908e3e3b83954ec5b5d5e6b31c13de133c396ec49601
MD5 9c0492ad620a4028c2f4986a28c409f1
SHA1 0e2d53799af6b742081f07d73978dbbf2c51dc12
SHA512 ab07bf3e0f3b95e91aa63ff7b9ce45ac016d34cdbe83fbb526ee3370c05bbb6ff229a26e6dfb9facd492025fb36699231bec214db04a7e6fff40d5e818a26717
SSDEEP 6144:JN6LHnk6/d9eV54d3FPEhdgH1xX+jNnerfapG+:JEz3/jshdonX+sA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb5ee7b40e1e2cbb4b49908e3e3b83954ec5b5d5e6b31c13de133c396ec49601

File Explorer

fb5ee7b40e1e2cbb4b49908e3e3b83954ec5b5d5e6b31c13de133c396ec49601

.exe 346KB

fb5ee7b40e1e2cbb4b49908e3e3b83954ec5b5d5e6b31c13de133c396ec49601

IMPHASH 3681c7ed963e765002642844f31bc81f
SHA256 fb5ee7b40e1e2cbb4b49908e3e3b83954ec5b5d5e6b31c13de133c396ec49601
MD5 9c0492ad620a4028c2f4986a28c409f1
SHA1 0e2d53799af6b742081f07d73978dbbf2c51dc12
SHA512 ab07bf3e0f3b95e91aa63ff7b9ce45ac016d34cdbe83fbb526ee3370c05bbb6ff229a26e6dfb9facd492025fb36699231bec214db04a7e6fff40d5e818a26717
SSDEEP 6144:JN6LHnk6/d9eV54d3FPEhdgH1xX+jNnerfapG+:JEz3/jshdonX+sA
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27924

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GetConsoleAliasesLengthW InterlockedDecrement InterlockedCompareExchange WriteConsoleInputA GetTickCount GetCommConfig GetCurrentThread LoadLibraryW ReadConsoleInputA FormatMessageW TransactNamedPipe GetNamedPipeInfo GetModuleFileNameW CreateActCtxA GetACP DisconnectNamedPipe GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress VirtualAlloc SearchPathA LoadLibraryA DeleteTimerQueue FindNextChangeNotification Module32FirstW FoldStringW FindNextFileA GetModuleHandleA HeapSetInformation UpdateResourceW WriteProfileStringW TlsAlloc AreFileApisANSI LCMapStringW LCMapStringA GetStringTypeW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapReAlloc WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetStdHandle GetCPInfo GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA CreateFileA CloseHandle GetStringTypeA

user32

LoadMenuA CharLowerBuffW CreateAcceleratorTableA CharToOemBuffW CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

fb5ee7b40e1e2cbb4b49908e3e3b83954ec5b5d5e6b31c13de133c396ec49601

kernel32

user32