64af94fc80d0295702a599ad9a8845c3a869b61ae5b41e5360c679cba6f32c2b

General

Target
64af94fc80d0295702a599ad9a8845c3a869b61ae5b41e5360c679cba6f32c2b
Size 210KB
Sample231030-ra56dsfc24
SHA256 64af94fc80d0295702a599ad9a8845c3a869b61ae5b41e5360c679cba6f32c2b
MD5 685172b8013783ba0b49b0a680dbe822
SHA1 b4ac62348df1190585093d335aaeb242d0899908
SHA512 ad2aae9ea1deabcbc7c41d10cb11d6748a99e917f73698936151eb53b1a73f68dd6d14325c2ad8fd0b28ab8a2c7d49adafec5b4339fac57478c8a422ae61c706
SSDEEP 3072:L5XLQAOIoLcCjOLUu4uzbIMZ8qo4ICpAOAiIe25Zc:hstIoLxKAfuzbzFo4ImW5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64af94fc80d0295702a599ad9a8845c3a869b61ae5b41e5360c679cba6f32c2b

File Explorer

64af94fc80d0295702a599ad9a8845c3a869b61ae5b41e5360c679cba6f32c2b

.exe 210KB

64af94fc80d0295702a599ad9a8845c3a869b61ae5b41e5360c679cba6f32c2b

IMPHASH 8dbd411dee61fc1b63660ff89eef7bc9
SHA256 64af94fc80d0295702a599ad9a8845c3a869b61ae5b41e5360c679cba6f32c2b
MD5 685172b8013783ba0b49b0a680dbe822
SHA1 b4ac62348df1190585093d335aaeb242d0899908
SHA512 ad2aae9ea1deabcbc7c41d10cb11d6748a99e917f73698936151eb53b1a73f68dd6d14325c2ad8fd0b28ab8a2c7d49adafec5b4339fac57478c8a422ae61c706
SSDEEP 3072:L5XLQAOIoLcCjOLUu4uzbIMZ8qo4ICpAOAiIe25Zc:hstIoLxKAfuzbzFo4ImW5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21653

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstChangeNotificationW WriteConsoleInputW WriteConsoleOutputCharacterW GetModuleHandleExA GetConsoleAliasExesA AllocConsole GlobalCompact MapUserPhysicalPages ReadConsoleA GetConsoleAliasA WriteConsoleInputA AddConsoleAliasW GetNumaAvailableMemoryNode OpenSemaphoreA SetCommBreak GetSystemDefaultLCID GenerateConsoleCtrlEvent FindNextVolumeMountPointA GetWindowsDirectoryA GetCompressedFileSizeW WaitNamedPipeW SetCommState GetDriveTypeA GetEnvironmentStrings GlobalAlloc AddRefActCtx GetVolumeInformationA LoadLibraryW CopyFileW _hread CreateEventA TransactNamedPipe EnumSystemCodePagesA GetFileAttributesW TerminateProcess GetTimeZoneInformation lstrcatA lstrlenW FindNextVolumeMountPointW RemoveVectoredExceptionHandler ReplaceFileA GetTempPathW GetShortPathNameA GetNamedPipeHandleStateW GetConsoleAliasesW GetStartupInfoA FindFirstFileA GetLastError GetCurrentDirectoryW SetLastError ReadConsoleOutputCharacterA CreateConsoleScreenBuffer VerLanguageNameA WriteProfileSectionA RemoveDirectoryA CopyFileA SetStdHandle OpenWaitableTimerA AddAtomW FindAtomA FoldStringW SetConsoleCursorInfo GetModuleHandleA SetLocaleInfoW FindNextFileW VirtualProtect CompareStringA GetFileTime GetConsoleCursorInfo QueryPerformanceFrequency SetProcessShutdownParameters GetVolumeNameForVolumeMountPointW DeleteFileW MoveFileWithProgressW ResetWriteWatch GetSystemTime EnumSystemLocalesW lstrcpyW AreFileApisANSI CloseHandle HeapSize GetStartupInfoW SetDefaultCommConfigA MoveFileA HeapReAlloc GetCommandLineW HeapSetInformation EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess HeapAlloc HeapFree HeapCreate GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage FlushFileBuffers WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW CreateFileW

user32

CharUpperA

advapi32

AbortSystemShutdownA

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

64af94fc80d0295702a599ad9a8845c3a869b61ae5b41e5360c679cba6f32c2b

kernel32

user32

advapi32

winhttp

generic