4dae3b84eeb5e36c144f9fad2f2b06d9e82381cda6b1f043033cf3644f339558

General

Target
4dae3b84eeb5e36c144f9fad2f2b06d9e82381cda6b1f043033cf3644f339558
Size 1.6MB
Sample231205-vcbaksdb22
SHA256 4dae3b84eeb5e36c144f9fad2f2b06d9e82381cda6b1f043033cf3644f339558
MD5 509b68725e595b30fb2f38c8ea2cf9c4
SHA1 1aff17b87ff213c1a8f4c8cfe48782e636b6fb32
SHA512 dc7a8e6404c3b1e2600c16c66ed023e6e5f7010efa96fa2c4c5abf8fe4a8c4847abd133a1198d4bb12224c93d4ede1ef1dfe1c6c584749160e9beff2a1585389
SSDEEP 24576:ejhyCJxQWOSUua9BgsID7yByhWjqcRE4ff6ySznNvWGYbjWfExlpaheDtg3UUag7:GfzUua9h9ERznNeXHWfExzmPLnvh6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dae3b84eeb5e36c144f9fad2f2b06d9e82381cda6b1f043033cf3644f339558

File Explorer

4dae3b84eeb5e36c144f9fad2f2b06d9e82381cda6b1f043033cf3644f339558

.dll 1.6MB

4dae3b84eeb5e36c144f9fad2f2b06d9e82381cda6b1f043033cf3644f339558

IMPHASH ada2db691d15e230c727b763fa43aa8a
SHA256 4dae3b84eeb5e36c144f9fad2f2b06d9e82381cda6b1f043033cf3644f339558
MD5 509b68725e595b30fb2f38c8ea2cf9c4
SHA1 1aff17b87ff213c1a8f4c8cfe48782e636b6fb32
SHA512 dc7a8e6404c3b1e2600c16c66ed023e6e5f7010efa96fa2c4c5abf8fe4a8c4847abd133a1198d4bb12224c93d4ede1ef1dfe1c6c584749160e9beff2a1585389
SSDEEP 24576:ejhyCJxQWOSUua9BgsID7yByhWjqcRE4ff6ySznNvWGYbjWfExlpaheDtg3UUag7:GfzUua9h9ERznNeXHWfExzmPLnvh6
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

33581

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle GetLastError GetCurrentDirectoryA CreateThread SuspendThread GetFileAttributesA FindFirstFileA FindNextFileA GetTempPathA GetStdHandle CreateNamedPipeA VirtualAlloc GetNamedPipeInfo GetNamedPipeHandleStateA MultiByteToWideChar GetDiskFreeSpaceA GetHandleInformation SetHandleInformation IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent SetLastError GetCurrentThreadId HeapAlloc ExitProcess FreeLibrary GetModuleHandleW GetModuleHandleExW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapFree InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime LoadLibraryExW LCMapStringW IsValidCodePage GetACP GetOEMCP GetCPInfo GetProcessHeap GetStringTypeW WideCharToMultiByte HeapSize HeapReAlloc GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead InterlockedFlushSList RtlUnwind RaiseException GetModuleFileNameA FindClose FindFirstFileExA GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType SetStdHandle WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW DecodePointer CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

4dae3b84eeb5e36c144f9fad2f2b06d9e82381cda6b1f043033cf3644f339558

kernel32

generic