67206564e3dc68c200d24e8535c5ca3a

General

Target
67206564e3dc68c200d24e8535c5ca3a
Size 305KB
Sample231222-felf1agch8
SHA256 22f006a17766e8df0e6a1b3eed5f65aab5dc12d5938e50b4116aef7b00ab183c
MD5 67206564e3dc68c200d24e8535c5ca3a
SHA1 76899dba330c2a60b16f4565622ee4036a7e8060
SHA512 73cfe88ee4734a4c8c76022642c7f1b785eae3aa12187a29e881ae79b0d6385c9be0f48be1ce86f37af680fbed1d1010e39e9cb652a4ac6115cd20298863d41b
SSDEEP 6144:VbxLQrdt3roQGbzsEaejcyQZ7Jv+t8i1kptVvMGGNK:Vbxcxt3laIRkeQRkpt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67206564e3dc68c200d24e8535c5ca3a

File Explorer

67206564e3dc68c200d24e8535c5ca3a

.exe 305KB

67206564e3dc68c200d24e8535c5ca3a

IMPHASH b7ebe503aba8ff6fce4b2b89581116dd
SHA256 22f006a17766e8df0e6a1b3eed5f65aab5dc12d5938e50b4116aef7b00ab183c
MD5 67206564e3dc68c200d24e8535c5ca3a
SHA1 76899dba330c2a60b16f4565622ee4036a7e8060
SHA512 73cfe88ee4734a4c8c76022642c7f1b785eae3aa12187a29e881ae79b0d6385c9be0f48be1ce86f37af680fbed1d1010e39e9cb652a4ac6115cd20298863d41b
SSDEEP 6144:VbxLQrdt3roQGbzsEaejcyQZ7Jv+t8i1kptVvMGGNK:Vbxcxt3laIRkeQRkpt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocalTime InterlockedIncrement ReadConsoleA InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW GetEnvironmentStringsW GetUserDefaultLCID AddConsoleAliasW SetVolumeMountPointW EnumCalendarInfoExW WriteFile GetUserDefaultLangID GetEnvironmentStrings WriteConsoleOutputA LeaveCriticalSection lstrcpynW FindNextVolumeW VerifyVersionInfoA HeapQueryInformation GetModuleFileNameW GetACP GetConsoleOutputCP GetProcAddress GetComputerNameExW VerLanguageNameA CreateTimerQueueTimer HeapUnlock LocalAlloc GetDefaultCommConfigA GetModuleHandleA QueueUserWorkItem GetConsoleTitleW PeekConsoleInputA GetCPInfoExA ReadConsoleInputW GlobalReAlloc LCMapStringW PulseEvent GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetLastError GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection TerminateProcess IsDebuggerPresent HeapSize SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer FreeEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc WideCharToMultiByte SetStdHandle GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA WriteConsoleW CreateFileA

user32

RealGetWindowClassW

gdi32

GetCharWidthFloatA

Sharing

General

Malware Config

Signatures

File Explorer

67206564e3dc68c200d24e8535c5ca3a

kernel32

user32

gdi32

generic