3391840fcc69c3123e26f09b398a6c3707ae6b0fb60880a505a2d63c32de2f67

General

Target
3391840fcc69c3123e26f09b398a6c3707ae6b0fb60880a505a2d63c32de2f67
Size 686KB
Sample231103-kr4kkaha34
SHA256 3391840fcc69c3123e26f09b398a6c3707ae6b0fb60880a505a2d63c32de2f67
MD5 d8ed6466110ed55d3feb9d12e699f6cf
SHA1 dea2f731c56891a6cf8753ab014f2f22ce6d2453
SHA512 3cec534a2a4127657edc045e5b2f54ab153318c398ce8746413412c5c4dd52bebb53ceb72fa593d35959bc10745d55a94b6efd71adb9e2ac86adb328d0e9c2ff
SSDEEP 12288:aJIHREjdfq1M7CPF26qHEiF4rmuHrMPL0sOsFB7a/Sx7Gwe71:aJCKS1YF4rmuIz0GFw/SdeR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3391840fcc69c3123e26f09b398a6c3707ae6b0fb60880a505a2d63c32de2f67

File Explorer

3391840fcc69c3123e26f09b398a6c3707ae6b0fb60880a505a2d63c32de2f67

.exe 686KB

3391840fcc69c3123e26f09b398a6c3707ae6b0fb60880a505a2d63c32de2f67

IMPHASH 1a18a9d4050d7d94c088092fc252cc06
SHA256 3391840fcc69c3123e26f09b398a6c3707ae6b0fb60880a505a2d63c32de2f67
MD5 d8ed6466110ed55d3feb9d12e699f6cf
SHA1 dea2f731c56891a6cf8753ab014f2f22ce6d2453
SHA512 3cec534a2a4127657edc045e5b2f54ab153318c398ce8746413412c5c4dd52bebb53ceb72fa593d35959bc10745d55a94b6efd71adb9e2ac86adb328d0e9c2ff
SSDEEP 12288:aJIHREjdfq1M7CPF26qHEiF4rmuHrMPL0sOsFB7a/Sx7Gwe71:aJCKS1YF4rmuIz0GFw/SdeR
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21765

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA RemoveVectoredExceptionHandler FindFirstFileW FindFirstChangeNotificationW SetLocaleInfoA WriteConsoleInputW GetModuleHandleExA GetConsoleAliasExesA AllocConsole IsBadHugeReadPtr GetProcessIoCounters WriteConsoleOutputCharacterA MapUserPhysicalPages GetConsoleAliasA ZombifyActCtx SetConsoleScreenBufferSize WriteConsoleInputA AddConsoleAliasW GetNumaAvailableMemoryNode OpenSemaphoreA GetSystemDefaultLCID MoveFileWithProgressA GenerateConsoleCtrlEvent FindNextVolumeMountPointA GetConsoleAliasesA ReadConsoleW GetWindowsDirectoryA WaitNamedPipeW SetCommState GetDriveTypeA GetEnvironmentStrings GlobalAlloc AddRefActCtx GetVolumeInformationA LoadLibraryW CopyFileW _hread CreateEventA GetExitCodeProcess TransactNamedPipe GetFileAttributesW GlobalFix GetCompressedFileSizeA lstrcatA lstrlenW FindNextVolumeMountPointW GetStartupInfoW ReplaceFileA GetTempPathW GetShortPathNameA GetNamedPipeHandleStateW GetStartupInfoA GetLastError SetLastError ReadConsoleOutputCharacterA CreateConsoleScreenBuffer CreateNamedPipeA EnumSystemCodePagesW SetStdHandle VerLanguageNameW OpenWaitableTimerA UnhandledExceptionFilter AddAtomW RemoveDirectoryW FoldStringW GetModuleHandleA FindNextFileW VirtualProtect GetCurrentDirectoryA CompareStringA GetFileTime QueryPerformanceFrequency GetShortPathNameW SetProcessShutdownParameters FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW ResetWriteWatch GetSystemTime EnumSystemLocalesW lstrcpyW AreFileApisANSI CloseHandle SetTimeZoneInformation DebugActiveProcess MoveFileA HeapAlloc HeapReAlloc GetCommandLineW HeapSetInformation EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW HeapCreate HeapFree FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage FlushFileBuffers WriteConsoleW MultiByteToWideChar HeapSize LCMapStringW GetStringTypeW CreateFileW

user32

CharUpperW

advapi32

AbortSystemShutdownA

winhttp

WinHttpReadData

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

3391840fcc69c3123e26f09b398a6c3707ae6b0fb60880a505a2d63c32de2f67

kernel32

user32

advapi32

winhttp

generic