e1b8b3358f7cdee4c12f8f07c80d8f01e703584f46cde07740ef8d4351f49f89

General

Target
e1b8b3358f7cdee4c12f8f07c80d8f01e703584f46cde07740ef8d4351f49f89
Size 247KB
Sample231019-xxpptaaf91
SHA256 e1b8b3358f7cdee4c12f8f07c80d8f01e703584f46cde07740ef8d4351f49f89
MD5 bb4ffc473b7a765ba16ea6b6d0dbec0f
SHA1 c0ffe7774fa104e5b2b29feccfc943bfdc57bc52
SHA512 679f3e16cb01f01c5c9e21a302617bb487b1f4389d69f32f3340d22248d419c4f49b38132a9e8cefc0235ebe1ed6973c3c2d1c761bc36ab8f59789bbc3d14c88
SSDEEP 3072:fAyIXeTbLBTfLBwgUs5ANr84o6brM6SY1um5Mis7:CIbL9fLBwgyrNo6bITxz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1b8b3358f7cdee4c12f8f07c80d8f01e703584f46cde07740ef8d4351f49f89

File Explorer

e1b8b3358f7cdee4c12f8f07c80d8f01e703584f46cde07740ef8d4351f49f89

.exe 247KB

e1b8b3358f7cdee4c12f8f07c80d8f01e703584f46cde07740ef8d4351f49f89

IMPHASH 149017f733f80c72398952f8220b087f
SHA256 e1b8b3358f7cdee4c12f8f07c80d8f01e703584f46cde07740ef8d4351f49f89
MD5 bb4ffc473b7a765ba16ea6b6d0dbec0f
SHA1 c0ffe7774fa104e5b2b29feccfc943bfdc57bc52
SHA512 679f3e16cb01f01c5c9e21a302617bb487b1f4389d69f32f3340d22248d419c4f49b38132a9e8cefc0235ebe1ed6973c3c2d1c761bc36ab8f59789bbc3d14c88
SSDEEP 3072:fAyIXeTbLBTfLBwgUs5ANr84o6brM6SY1um5Mis7:CIbL9fLBwgyrNo6bITxz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

30303

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe GetConsoleAliasExesA UpdateResourceA DeleteVolumeMountPointA SetConsoleTextAttribute GetCommState GetConsoleAliasA FindCloseChangeNotification CreateHardLinkA GetTickCount GetWindowsDirectoryA GetDateFormatA WideCharToMultiByte LoadLibraryW ReadConsoleInputA FreeConsole GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW EnumSystemCodePagesA GetNamedPipeInfo FileTimeToSystemTime SetComputerNameExW GetVolumePathNameA GetConsoleAliasesW InterlockedExchange FindFirstFileW GetLastError SetLastError BackupRead GetProcAddress VirtualAlloc PeekConsoleInputW RemoveDirectoryA LocalAlloc GetNumberFormatW RemoveDirectoryW FoldStringW GetOEMCP GetModuleHandleA FreeEnvironmentStringsW VirtualProtect SetCalendarInfoA GlobalAddAtomW AddConsoleAliasA SetFileAttributesW CreateFileA WriteConsoleW SetPriorityClass FindResourceA FillConsoleOutputCharacterW GetConsoleOutputCP WriteConsoleA CloseHandle HeapFree GetModuleHandleW Sleep ExitProcess GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc HeapSize MultiByteToWideChar ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers

user32

LoadMenuA ChangeDisplaySettingsW CharToOemBuffW

gdi32

GetCharWidthA GetCharABCWidthsFloatA GetBitmapDimensionEx

winhttp

WinHttpOpen WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

e1b8b3358f7cdee4c12f8f07c80d8f01e703584f46cde07740ef8d4351f49f89

kernel32

user32

gdi32

winhttp

generic