66e164f2a4ea3b37586ceb2d699aa89e8a9475e9cd25c51476fd0a7d307df76a

General

Target
66e164f2a4ea3b37586ceb2d699aa89e8a9475e9cd25c51476fd0a7d307df76a
Size 550KB
Sample231116-fezzdsgh31
SHA256 66e164f2a4ea3b37586ceb2d699aa89e8a9475e9cd25c51476fd0a7d307df76a
MD5 7c4fbc51802a403d2ada66e612242f1a
SHA1 18494553379a0d75137e33a94ba1d094547bf4a8
SHA512 32ee777d6f0036f441f13bb157c20a89d70cddaa2fd84e6d515ea899ffeb75dc229def01e7f862c58697e35b85c741c5e6d2706379578682788b159f6208c42a
SSDEEP 12288:JerdkDtFFlpgSzMKP+SCJomR5pdbTGxqz:BtF3pg8wsmRdbT2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66e164f2a4ea3b37586ceb2d699aa89e8a9475e9cd25c51476fd0a7d307df76a

File Explorer

66e164f2a4ea3b37586ceb2d699aa89e8a9475e9cd25c51476fd0a7d307df76a

.exe 550KB

66e164f2a4ea3b37586ceb2d699aa89e8a9475e9cd25c51476fd0a7d307df76a

IMPHASH f62af2e8b5dd9dbbfa6927c42dc35c86
SHA256 66e164f2a4ea3b37586ceb2d699aa89e8a9475e9cd25c51476fd0a7d307df76a
MD5 7c4fbc51802a403d2ada66e612242f1a
SHA1 18494553379a0d75137e33a94ba1d094547bf4a8
SHA512 32ee777d6f0036f441f13bb157c20a89d70cddaa2fd84e6d515ea899ffeb75dc229def01e7f862c58697e35b85c741c5e6d2706379578682788b159f6208c42a
SSDEEP 12288:JerdkDtFFlpgSzMKP+SCJomR5pdbTGxqz:BtF3pg8wsmRdbT2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20629

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FindResourceA GetNativeSystemInfo GetConsoleAliasExesLengthA GlobalAddAtomA InterlockedIncrement SetConsoleTextAttribute GetConsoleAliasA InitializeSListHead GetModuleHandleW GetTickCount GetConsoleAliasesA GetWindowsDirectoryA GetPriorityClass GetVolumePathNameW TerminateThread SizeofResource GetSystemWindowsDirectoryA DeleteVolumeMountPointW EnumSystemCodePagesA VerifyVersionInfoA SetComputerNameExW lstrcatA GetConsoleAliasesW FillConsoleOutputCharacterW GetLastError SetVolumeLabelA BackupRead GetProcAddress VirtualAlloc PeekConsoleInputW CreateNamedPipeA RemoveDirectoryA CreateMemoryResourceNotification SearchPathA SetFileAttributesA PrepareTape LoadLibraryA OpenWaitableTimerW LocalAlloc GetNumberFormatW FoldStringA GlobalFindAtomW UpdateResourceW FreeEnvironmentStringsW VirtualProtect ReadConsoleInputW GetCurrentProcessId AddConsoleAliasA SetLastError LCMapStringW LCMapStringA Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapSize WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW

user32

CharToOemBuffA GetMessageExtraInfo

gdi32

GetCharABCWidthsFloatW

winhttp

WinHttpWriteData

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

66e164f2a4ea3b37586ceb2d699aa89e8a9475e9cd25c51476fd0a7d307df76a

kernel32

user32

gdi32

winhttp

generic