8bd61c883e9ffc637c7dd0bf7ab93d6b

General

Target
8bd61c883e9ffc637c7dd0bf7ab93d6b
Size 696KB
Sample231222-pk72maabar
SHA256 60f4de6a343a174eebb2455834b4333103d0159b5a975f793e98b91bcc96594a
MD5 8bd61c883e9ffc637c7dd0bf7ab93d6b
SHA1 fd2fcc0d26d4aff9adbed3b57befb2568222ff38
SHA512 e37e32b1bf6b6a63ec02855cf540d7c188b308c332efd63b82a32b2344b7d8d0fdd9a2eade329d7ac682a2ab4133dac19fbf2c1a5bdb2d6d6b37402a4628bd49
SSDEEP 12288:IsmFRVtoSeN6hocevUGQ8zRNXnf8HWpKKXNAh/gEHjE:IsgvEVcevrsiKmWh/g+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bd61c883e9ffc637c7dd0bf7ab93d6b

File Explorer

8bd61c883e9ffc637c7dd0bf7ab93d6b

.exe 696KB

8bd61c883e9ffc637c7dd0bf7ab93d6b

IMPHASH 78d8ce3d41db46da36eaecb05a52fe6b
SHA256 60f4de6a343a174eebb2455834b4333103d0159b5a975f793e98b91bcc96594a
MD5 8bd61c883e9ffc637c7dd0bf7ab93d6b
SHA1 fd2fcc0d26d4aff9adbed3b57befb2568222ff38
SHA512 e37e32b1bf6b6a63ec02855cf540d7c188b308c332efd63b82a32b2344b7d8d0fdd9a2eade329d7ac682a2ab4133dac19fbf2c1a5bdb2d6d6b37402a4628bd49
SSDEEP 12288:IsmFRVtoSeN6hocevUGQ8zRNXnf8HWpKKXNAh/gEHjE:IsgvEVcevrsiKmWh/g+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

191176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

rasapi32

RasEnumConnectionsA RasGetConnectStatusA

kernel32

IsBadWritePtr HeapReAlloc CreateFileA HeapAlloc QueryPerformanceCounter HeapFree SetTapeParameters GetTickCount VirtualFree GetDateFormatA OpenProcess GetVolumeInformationA Sleep HeapCreate CreateProcessA CreateDirectoryA GetStartupInfoA VirtualAlloc CopyFileA ResetEvent GetLocalTime LockResource GetSystemInfo GetModuleHandleA VirtualProtect GetVersionExA CloseHandle GetSystemTime DeleteFileA InterlockedIncrement InterlockedDecrement InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCommandLineA RtlUnwind RaiseException ExitProcess LCMapStringA WideCharToMultiByte MultiByteToWideChar GetLastError LCMapStringW GetCPInfo HeapDestroy WriteFile FlushFileBuffers SetFilePointer GetProcAddress TerminateProcess GetCurrentProcess GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc SetLastError GetCurrentThreadId TlsFree TlsSetValue TlsGetValue SetUnhandledExceptionFilter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr VirtualQuery SetStdHandle ReadFile LoadLibraryA GetACP GetOEMCP GetLocaleInfoW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

8bd61c883e9ffc637c7dd0bf7ab93d6b

rasapi32

kernel32

generic