d7b78f074c16aa543cdf496bc12728facd1eff16f031bbe7c42b903b866a171e

General

Target
d7b78f074c16aa543cdf496bc12728facd1eff16f031bbe7c42b903b866a171e
Size 1.6MB
Sample230826-a5mtvsfg84
SHA256 d7b78f074c16aa543cdf496bc12728facd1eff16f031bbe7c42b903b866a171e
MD5 65a4087b0bfbf9b561e48e29dbfdf9bb
SHA1 891c567c4f3b89dbdfa7eef75bb8c3f34c2e7148
SHA512 9d43c930dcf8ad7238a39fb05a57efa42fc4c20f857afb02142cca42bd73da5a56a47ed17d77f46d1c7c4c657ab3603defc50c5126444ab01e3b539fe1b07ca7
SSDEEP 49152:GfHR0Vck32VSb1+/zScwpMMMMMMMMbMMMMMMMMSOrWf/ThFbAwpas:G/R0Vcc2kbuOcwpMMMMMMMMbMMMMMMMr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7b78f074c16aa543cdf496bc12728facd1eff16f031bbe7c42b903b866a171e

File Explorer

d7b78f074c16aa543cdf496bc12728facd1eff16f031bbe7c42b903b866a171e

.exe 1.6MB

d7b78f074c16aa543cdf496bc12728facd1eff16f031bbe7c42b903b866a171e

IMPHASH 388b1f39b4737ac1f76bc6a9c770ae05
SHA256 d7b78f074c16aa543cdf496bc12728facd1eff16f031bbe7c42b903b866a171e
MD5 65a4087b0bfbf9b561e48e29dbfdf9bb
SHA1 891c567c4f3b89dbdfa7eef75bb8c3f34c2e7148
SHA512 9d43c930dcf8ad7238a39fb05a57efa42fc4c20f857afb02142cca42bd73da5a56a47ed17d77f46d1c7c4c657ab3603defc50c5126444ab01e3b539fe1b07ca7
SSDEEP 49152:GfHR0Vck32VSb1+/zScwpMMMMMMMMbMMMMMMMMSOrWf/ThFbAwpas:G/R0Vcc2kbuOcwpMMMMMMMMbMMMMMMMr
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

424048

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msacm32

acmGetVersion acmStreamOpen acmStreamClose

mpr

WNetCloseEnum WNetOpenEnumA

comctl32

ord17 UninitializeFlatSB InitializeFlatSB ImageList_Write InitCommonControlsEx

kernel32

MultiByteToWideChar HeapReAlloc QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess LCMapStringA LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetCommandLineA IsValidCodePage DisconnectNamedPipe DosDateTimeToFileTime GetLocaleInfoA GetProcAddress GetLastError VirtualAlloc HeapAlloc GetOEMCP GetACP GetCPInfo LCMapStringW GetStringTypeA LoadLibraryA GetStringTypeW WriteFile HeapFree VirtualFree HeapCreate RtlUnwind GetModuleHandleA GetStartupInfoA GetVersion TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetEnvironmentVariableA GetVersionExA HeapDestroy

user32

mouse_event wsprintfA SetFocus MessageBoxA

shlwapi

StrTrimA StrToIntExA StrToIntA

Name

.text

Size

424KB

Virtual Size

423KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

14.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

17B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

812KB

Virtual Size

812KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fam729

Size

399KB

Virtual Size

400KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

d7b78f074c16aa543cdf496bc12728facd1eff16f031bbe7c42b903b866a171e

msacm32

mpr

comctl32

kernel32

user32

shlwapi