4abd8fedbb6c935969b61694dbb5ff0d8a3327713d28ff68e445f00642a92a91

General

Target
4abd8fedbb6c935969b61694dbb5ff0d8a3327713d28ff68e445f00642a92a91
Size 729KB
Sample231014-t5kt2saa44
SHA256 4abd8fedbb6c935969b61694dbb5ff0d8a3327713d28ff68e445f00642a92a91
MD5 ce9bcd66abf17833704ed908b311dda5
SHA1 0843d886ef1095ecc3bb6e85482f9380b9d1c93f
SHA512 d875263e6b7da9445ba1f2c80a4448ceeaecb6fa4a1d1d774b6248052c402739256d5a81c8e090febb23924ccb9f387f9874b5e60cc74688dc6dbce79c52bc39
SSDEEP 12288:wjqAzq0q27Rmq7ZpFZdWem+suztpPlFLNMUXUW2TRKjgSncEP5GUh4ZpUPad:wjqA18UZrZ5su7dFLMW2lUcEB3h4ZpUc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4abd8fedbb6c935969b61694dbb5ff0d8a3327713d28ff68e445f00642a92a91

File Explorer

4abd8fedbb6c935969b61694dbb5ff0d8a3327713d28ff68e445f00642a92a91

.exe 729KB

4abd8fedbb6c935969b61694dbb5ff0d8a3327713d28ff68e445f00642a92a91

IMPHASH 989f3a73c2edb32843754c33d7dd9bcf
SHA256 4abd8fedbb6c935969b61694dbb5ff0d8a3327713d28ff68e445f00642a92a91
MD5 ce9bcd66abf17833704ed908b311dda5
SHA1 0843d886ef1095ecc3bb6e85482f9380b9d1c93f
SHA512 d875263e6b7da9445ba1f2c80a4448ceeaecb6fa4a1d1d774b6248052c402739256d5a81c8e090febb23924ccb9f387f9874b5e60cc74688dc6dbce79c52bc39
SSDEEP 12288:wjqAzq0q27Rmq7ZpFZdWem+suztpPlFLNMUXUW2TRKjgSncEP5GUh4ZpUPad:wjqA18UZrZ5su7dFLMW2lUcEB3h4ZpUc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16287

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe GetCPInfo GetProcessIoCounters WriteConsoleOutputCharacterA SetComputerNameW AddConsoleAliasW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCompressedFileSizeW GlobalAlloc LoadLibraryW SizeofResource SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetNamedPipeInfo GetFileAttributesW GetVolumePathNameA GetLargestConsoleWindowSize ReleaseActCtx FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc PeekConsoleInputW GetConsoleAliasesLengthW EnumSystemCodePagesW GlobalFree GetNumberFormatW RemoveDirectoryW SetFileApisToANSI BeginUpdateResourceA FoldStringA FindNextFileA GetModuleHandleA FindFirstChangeNotificationA VirtualProtect _lopen FindAtomW GetWindowsDirectoryW GetCurrentProcessId GlobalAddAtomW OpenFileMappingA WriteConsoleW GetConsoleOutputCP WriteConsoleA WriteConsoleInputW BackupWrite GetComputerNameA HeapFree GetCommandLineA GetStartupInfoA HeapAlloc RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetACP GetOEMCP IsValidCodePage LoadLibraryA CloseHandle CreateFileA SetFilePointer SetStdHandle LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap

user32

GetWindowTextLengthA LoadMenuW ChangeDisplaySettingsA CharToOemBuffA

gdi32

GetCharABCWidthsFloatA

advapi32

RegOpenKeyA

Sharing

General

Malware Config

Signatures

File Explorer

4abd8fedbb6c935969b61694dbb5ff0d8a3327713d28ff68e445f00642a92a91

kernel32

user32

gdi32

advapi32