06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb

General

Target
06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb
Size 191KB
Sample231006-rh311aef48
SHA256 fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb
MD5 b429a306824efe27b963013eafbe86a1
SHA1 8e665c9034a9c3faa7ab9ee81c7c1a79115ca66f
SHA512 7c4ab3b46105e63ffa6fdf41a915f8c25556496e6049ee9313696b48eeb6f960717cc3c4762ff65465014c4a0179531ef48d9fda913a39e552e19d6bd2400125
SSDEEP 3072:ZD7siN7RklBgjvADqii86oASCoCMWkOUtMg02boGLQnti5jgO4j:1spnqAn3fCbkhOgrbjmtU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb

File Explorer

06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb

.exe 191KB

06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb

IMPHASH 046dfae6c2280fbc36820b8f28604732
SHA256 fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb
MD5 b429a306824efe27b963013eafbe86a1
SHA1 8e665c9034a9c3faa7ab9ee81c7c1a79115ca66f
SHA512 7c4ab3b46105e63ffa6fdf41a915f8c25556496e6049ee9313696b48eeb6f960717cc3c4762ff65465014c4a0179531ef48d9fda913a39e552e19d6bd2400125
SSDEEP 3072:ZD7siN7RklBgjvADqii86oASCoCMWkOUtMg02boGLQnti5jgO4j:1spnqAn3fCbkhOgrbjmtU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

5

Entry point

17443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange AddConsoleAliasW _lclose GetTickCount GetNumberFormatA GetWindowsDirectoryA SetProcessPriorityBoost GlobalAlloc LoadLibraryW SetVolumeMountPointA GetSystemWindowsDirectoryA GetFileAttributesW GetCompressedFileSizeA CreateActCtxA GetACP FillConsoleOutputCharacterW SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc BeginUpdateResourceW RemoveDirectoryA EnumSystemCodePagesW SetComputerNameA _hwrite LoadResource AddAtomW BeginUpdateResourceA GetCommMask FoldStringA GlobalFindAtomW OpenFileMappingW FreeEnvironmentStringsW FindNextFileW VirtualProtect PeekConsoleInputA EndUpdateResourceA ReadConsoleInputW TerminateJobObject GetCurrentProcessId LocalFree FindNextVolumeA GetProcessHeap SetEndOfFile FlushFileBuffers PeekNamedPipe CreateHardLinkW WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree RaiseException GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind ReadFile DeleteCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc GetModuleHandleA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA SetStdHandle WriteConsoleA

user32

ChangeDisplaySettingsA CharToOemBuffA PostMessageW GetWindowTextLengthA LoadMenuW

gdi32

GetCharacterPlacementA GetPolyFillMode

ole32

CoMarshalHresult

Sharing

General

Malware Config

Signatures

File Explorer

06102023_2212_fdcf2a2e233da618f14e9c9f479bfddb2044507d4e627bfb864067484b675bbb

kernel32

user32

gdi32

ole32