0208bd1645c33e3b41e53da7dbd90819f9a3c69773da7cb3649f8f60809a1361

General

Target
0208bd1645c33e3b41e53da7dbd90819f9a3c69773da7cb3649f8f60809a1361
Size 1.6MB
Sample231011-pwt9xaab45
SHA256 0208bd1645c33e3b41e53da7dbd90819f9a3c69773da7cb3649f8f60809a1361
MD5 c2e8eed0b8aa8075f9f69097472cf1e4
SHA1 e27f3d67ea660a767e82eca15362c9961e143509
SHA512 cbf8a86684e8dd0794063fc25090ac058f819760021e2db5adef3a0b2bebccd84ffb94c9facd0d0eb9dc25da6503fd779c4103953fdc6e5681d15379b932780b
SSDEEP 12288:rxP/aK2vB+EBThObzJATPYmoAw/AmgK+u9G/Xrjctz/grJFEj7NHn:rlCKABTYqcm8Imh+PXCz/CJFE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0208bd1645c33e3b41e53da7dbd90819f9a3c69773da7cb3649f8f60809a1361

File Explorer

0208bd1645c33e3b41e53da7dbd90819f9a3c69773da7cb3649f8f60809a1361

.exe 1.6MB

0208bd1645c33e3b41e53da7dbd90819f9a3c69773da7cb3649f8f60809a1361

IMPHASH b696542cade53789c2cbed09ce287013
SHA256 0208bd1645c33e3b41e53da7dbd90819f9a3c69773da7cb3649f8f60809a1361
MD5 c2e8eed0b8aa8075f9f69097472cf1e4
SHA1 e27f3d67ea660a767e82eca15362c9961e143509
SHA512 cbf8a86684e8dd0794063fc25090ac058f819760021e2db5adef3a0b2bebccd84ffb94c9facd0d0eb9dc25da6503fd779c4103953fdc6e5681d15379b932780b
SSDEEP 12288:rxP/aK2vB+EBThObzJATPYmoAw/AmgK+u9G/Xrjctz/grJFEj7NHn:rlCKABTYqcm8Imh+PXCz/CJFE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

30034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EncodePointer ExitProcess GetModuleHandleExW GetStdHandle WriteFile FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetFileType WriteConsoleW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

0208bd1645c33e3b41e53da7dbd90819f9a3c69773da7cb3649f8f60809a1361

advapi32

kernel32

shell32

user32

shlwapi