1a2d1a94d0027d2609f971e28122aa0c

General

Target
1a2d1a94d0027d2609f971e28122aa0c
Size 322KB
Sample231219-n8a65ahbd5
SHA256 af2f94f56cc1e2a68689cff4a0228672858e56a9cc8b4853e1da2e2d9f7026ff
MD5 1a2d1a94d0027d2609f971e28122aa0c
SHA1 e93fb1d82f672c03d1d24798919cad18fceed9fe
SHA512 26b8c22022a0f65a98fa5836d53f54bffe736ff91998fe907c60e42ced093d586031ad91ed8be305a0a04659bbec8734ba44881c71e334bdc5d14c8d4902d699
SSDEEP 6144:1Y8B7keuKVbtGd04LnsFoZxJJ8Kd0chmzip4M:weu+bMbLns2Z2Kd0cow4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a2d1a94d0027d2609f971e28122aa0c

File Explorer

1a2d1a94d0027d2609f971e28122aa0c

.exe 322KB

1a2d1a94d0027d2609f971e28122aa0c

IMPHASH 8999899787bd60b1911e458f2d25de40
SHA256 af2f94f56cc1e2a68689cff4a0228672858e56a9cc8b4853e1da2e2d9f7026ff
MD5 1a2d1a94d0027d2609f971e28122aa0c
SHA1 e93fb1d82f672c03d1d24798919cad18fceed9fe
SHA512 26b8c22022a0f65a98fa5836d53f54bffe736ff91998fe907c60e42ced093d586031ad91ed8be305a0a04659bbec8734ba44881c71e334bdc5d14c8d4902d699
SSDEEP 6144:1Y8B7keuKVbtGd04LnsFoZxJJ8Kd0chmzip4M:weu+bMbLns2Z2Kd0cow4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

115984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstChangeNotificationW SetFilePointer GetDriveTypeW GetSystemWindowsDirectoryW AddConsoleAliasW FlushViewOfFile OutputDebugStringW GetModuleHandleW GetSystemWow64DirectoryA LoadLibraryW _hread SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult lstrlenW GetStartupInfoW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA OpenMutexW GetLastError GetCurrentDirectoryW CreateTimerQueue GetLongPathNameA SetFirmwareEnvironmentVariableW WriteProfileSectionA GetConsoleDisplayMode SearchPathA GetPrivateProfileStringA LocalAlloc PostQueuedCompletionStatus GetCommMask AddAtomA HeapWalk SetEnvironmentVariableA GetProcessShutdownParameters QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency GetCPInfoExA FindAtomW CloseHandle CreateFileW SetStdHandle GetProcAddress SetVolumeLabelA InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation RaiseException ExitProcess WriteFile GetStdHandle IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapValidate IsBadReadPtr OutputDebugStringA WriteConsoleW GetFileType QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageTime DrawFrameControl

advapi32

AbortSystemShutdownW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

1a2d1a94d0027d2609f971e28122aa0c

kernel32

user32

advapi32

msimg32

generic