c3534dbed9892902a6821fe920c16aeb

General

Target
c3534dbed9892902a6821fe920c16aeb
Size 228KB
Sample231222-rtknssafek
SHA256 272009f309922124d4c3997d4d04b6e1b9a46f05b51f008f7b47c65b61b857c8
MD5 c3534dbed9892902a6821fe920c16aeb
SHA1 fb8a4a4db6bdc99fa9b22fb39ea2f54a9fe169e4
SHA512 88527a3929e6722d0d3aa3a2b483c2d099871b3f2a0ca2396bbabfd36fd368911f7de64be4636284e37a4001a384761c3e1b909af1a7544d3926ac1459b17f7e
SSDEEP 6144:eXn7vLL7+c0hMMUZ69YidRMGt7T+J+Y7mq:Q7zn+ceOwdt7TaTt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3534dbed9892902a6821fe920c16aeb

File Explorer

c3534dbed9892902a6821fe920c16aeb

.exe 228KB

c3534dbed9892902a6821fe920c16aeb

IMPHASH 06fbc87344400a3722a88a2791d1fe43
SHA256 272009f309922124d4c3997d4d04b6e1b9a46f05b51f008f7b47c65b61b857c8
MD5 c3534dbed9892902a6821fe920c16aeb
SHA1 fb8a4a4db6bdc99fa9b22fb39ea2f54a9fe169e4
SHA512 88527a3929e6722d0d3aa3a2b483c2d099871b3f2a0ca2396bbabfd36fd368911f7de64be4636284e37a4001a384761c3e1b909af1a7544d3926ac1459b17f7e
SSDEEP 6144:eXn7vLL7+c0hMMUZ69YidRMGt7T+J+Y7mq:Q7zn+ceOwdt7TaTt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6953

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcpynA GetDefaultCommConfigW ReadConsoleA InterlockedDecrement SetEnvironmentVariableW GetEnvironmentStringsW GetUserDefaultLCID GetSystemDefaultLCID EnumCalendarInfoExW GetConsoleTitleA WriteFile GetEnvironmentStrings InitializeCriticalSectionAndSpinCount SetVolumeMountPointA GetSystemWindowsDirectoryA LeaveCriticalSection GetComputerNameExA GetModuleFileNameW GetACP LCMapStringA VerifyVersionInfoW InterlockedExchange GetProcAddress PeekConsoleInputW VerLanguageNameA CopyFileA GetLocalTime WriteConsoleA LocalAlloc SetConsoleOutputCP Module32FirstW GetModuleFileNameA GetModuleHandleA QueueUserWorkItem PeekConsoleInputA ReadConsoleInputW GetCurrentProcessId AddConsoleAliasA FindNextVolumeA PulseEvent GetCommandLineW GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapSize ExitProcess SetFilePointer GetStdHandle FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc LoadLibraryA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

RealGetWindowClassW

gdi32

GetCharWidthFloatW

Sharing

General

Malware Config

Signatures

File Explorer

c3534dbed9892902a6821fe920c16aeb

kernel32

user32

gdi32

generic