608c5496db6dd79f0383adb6109af52663289276bc9b7973b881e1d858d4702e

General

Target
608c5496db6dd79f0383adb6109af52663289276bc9b7973b881e1d858d4702e
Size 2.0MB
Sample231208-mfb3aaaf34
SHA256 608c5496db6dd79f0383adb6109af52663289276bc9b7973b881e1d858d4702e
MD5 f17d36b7435da33a9a9d550eaef8f549
SHA1 f079337f39395c7e7bcdc3c05f6287751a7d4f73
SHA512 515a2c5a0c2211e257cbf6e0e0c49299c610d8c90d400c6c02acb4f4ece2f60b2cb91d311b73d7da8e602fde594fb508538e783631c43bf61a98c60b37c0e6fc
SSDEEP 49152:XLcMLSbtXIRK57i9j78xUn3BlJfoE1xNAfF1oH3tb2qZH9s:XLckSE67w8yJfoE1xNA7qbZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
608c5496db6dd79f0383adb6109af52663289276bc9b7973b881e1d858d4702e

File Explorer

608c5496db6dd79f0383adb6109af52663289276bc9b7973b881e1d858d4702e

.exe 2.0MB

608c5496db6dd79f0383adb6109af52663289276bc9b7973b881e1d858d4702e

IMPHASH 95d16c10cc1e5e3ce043f7bf8ba9a186
SHA256 608c5496db6dd79f0383adb6109af52663289276bc9b7973b881e1d858d4702e
MD5 f17d36b7435da33a9a9d550eaef8f549
SHA1 f079337f39395c7e7bcdc3c05f6287751a7d4f73
SHA512 515a2c5a0c2211e257cbf6e0e0c49299c610d8c90d400c6c02acb4f4ece2f60b2cb91d311b73d7da8e602fde594fb508538e783631c43bf61a98c60b37c0e6fc
SSDEEP 49152:XLcMLSbtXIRK57i9j78xUn3BlJfoE1xNAfF1oH3tb2qZH9s:XLckSE67w8yJfoE1xNA7qbZ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext VirtualQuery LoadResource GetCurrentProcess GetCurrentThread VirtualFreeEx SizeofResource CreateProcessA GetSystemDirectoryA SetPriorityClass SetThreadPriority GetShortPathNameA GetLastError VirtualAllocEx LockResource GetModuleFileNameA CloseHandle WriteProcessMemory ResumeThread FindResourceA GetThreadContext GetEnvironmentVariableA ExitProcess FlushFileBuffers WriteConsoleW SetStdHandle GetCommandLineA EncodePointer DecodePointer GetSystemTimeAsFileTime RaiseException RtlUnwind SetLastError GetCurrentThreadId GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW IsDebuggerPresent IsProcessorFeaturePresent HeapSize EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo LoadLibraryExW OutputDebugStringW GetConsoleCP GetConsoleMode SetFilePointerEx HeapReAlloc LCMapStringW GetStringTypeW CreateFileW

advapi32

LookupPrivilegeValueA OpenProcessToken AdjustTokenPrivileges

shell32

SHChangeNotify ShellExecuteExA

Sharing

General

Malware Config

Signatures

File Explorer

608c5496db6dd79f0383adb6109af52663289276bc9b7973b881e1d858d4702e

kernel32

advapi32

shell32

generic