ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5

General

Target
ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5
Size 833KB
Sample230907-ttya1abf3x
SHA256 ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5
MD5 b7d6e0d4e7c4103645cb79133537e737
SHA1 411f5be09a1ecce1ebb26ff639f79d55f190f1eb
SHA512 1c0c260642a445c3549ab6f1f072e0a5ef3ad9afa5c543b7c76b87cee940973573ace561d9e9fae82440dc1d0309f0d3d9890be357dff7aca6182ad687f5b08f
SSDEEP 12288:WPXO8AW1c6UmYnp/vLHSzs5RIYfmb9elhuwNqMAiR8xX:WvOU1c7np/vLHCs5RIY09el8wNbp4X
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5

File Explorer

ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5

.exe 833KB

ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5

IMPHASH e77054925f91bbb709fc17135ae0c093
SHA256 ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5
MD5 b7d6e0d4e7c4103645cb79133537e737
SHA1 411f5be09a1ecce1ebb26ff639f79d55f190f1eb
SHA512 1c0c260642a445c3549ab6f1f072e0a5ef3ad9afa5c543b7c76b87cee940973573ace561d9e9fae82440dc1d0309f0d3d9890be357dff7aca6182ad687f5b08f
SSDEEP 12288:WPXO8AW1c6UmYnp/vLHSzs5RIYfmb9elhuwNqMAiR8xX:WvOU1c7np/vLHCs5RIY09el8wNbp4X
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

41246

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA EnumCalendarInfoW InterlockedDecrement GetCurrentProcess GetEnvironmentStringsW SetHandleInformation GetProfileStringW AddConsoleAliasW SetVolumeMountPointW OpenSemaphoreA GetSystemDefaultLCID BackupSeek FreeEnvironmentStringsA GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent GetConsoleAliasesLengthA EnumTimeFormatsW GetCommandLineA TzSpecificLocalTimeToSystemTime GetDriveTypeA GetEnvironmentStrings ActivateActCtx GlobalAlloc LoadLibraryW GetCalendarInfoW SetVolumeMountPointA SetConsoleCP TerminateProcess GetSystemDirectoryA GetStartupInfoW RaiseException CreateJobObjectA GetConsoleAliasExesA InterlockedExchange GetLastError GetCurrentDirectoryW PeekConsoleInputW RemoveDirectoryA EnumSystemCodePagesW GlobalGetAtomNameA GetNumaHighestNodeNumber LoadLibraryA OpenMutexA GetProcessId LocalAlloc GetFileType MoveFileA BuildCommDCBAndTimeoutsW AddVectoredExceptionHandler GetNumberFormatW AddAtomW FindNextFileA GlobalUnWire GetModuleHandleA EnumResourceNamesA FindNextFileW GetStringTypeW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA GetShortPathNameW FindAtomW FindFirstVolumeW FindFirstFileW SetDefaultCommConfigA GetCommandLineW GetComputerNameA GetPrivateProfileIntW GetVolumeNameForVolumeMountPointA ReadFile WriteConsoleW WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetProcAddress ExitProcess DeleteFileA HeapSetInformation GetCPInfo RtlUnwind LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize CloseHandle FreeEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers CreateFileW

gdi32

GetCharABCWidthsW GetTextFaceW SelectPalette

advapi32

LookupAccountSidW

ole32

CoGetInstanceFromFile

Sharing

General

Malware Config

Signatures

File Explorer

ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5

kernel32

gdi32

advapi32

ole32