321ebf1c2e57ae454232ee12b6892164

Sharing

Copy URL Twitter E-mail

General

Target
321ebf1c2e57ae454232ee12b6892164
Size 383KB
Sample231225-wdf3wsgbbj
SHA256 3759a4136f3ab450b1c26121511bdfea101baf948b580af60516c8c2d5c7b900
MD5 321ebf1c2e57ae454232ee12b6892164
SHA1 db9f088a05203a6caf9656e59731f027adfe1bd0
SHA512 afc14c50480f173932da1c0f7d80ef7667eb95a8c8f66279f8481c4ef85a669c8c0ac15582b6762521b78d34af7510c374dd1b30e3fd14e1d273639b4c85e083
SSDEEP 6144:cf4h+LDGoTfJGkGiJxRuEGt/b2j7sZA7kasm5uqv8nmqSiAh1NSnc8xND+OXmKKg:cfDLDGoTfMLiJ544iSXPonj/D+O2KKg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
321ebf1c2e57ae454232ee12b6892164

File Explorer

321ebf1c2e57ae454232ee12b6892164

.exe 383KB

321ebf1c2e57ae454232ee12b6892164

IMPHASH d4cc1601fd324eebfdf856765dda2bd4
SHA256 3759a4136f3ab450b1c26121511bdfea101baf948b580af60516c8c2d5c7b900
MD5 321ebf1c2e57ae454232ee12b6892164
SHA1 db9f088a05203a6caf9656e59731f027adfe1bd0
SHA512 afc14c50480f173932da1c0f7d80ef7667eb95a8c8f66279f8481c4ef85a669c8c0ac15582b6762521b78d34af7510c374dd1b30e3fd14e1d273639b4c85e083
SSDEEP 6144:cf4h+LDGoTfJGkGiJxRuEGt/b2j7sZA7kasm5uqv8nmqSiAh1NSnc8xND+OXmKKg:cfDLDGoTfMLiJ544iSXPonj/D+O2KKg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

PlaySoundW

kernel32

GetProcessHeap GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW CreateFileW GetFileSizeEx GetConsoleOutputCP GetFileAttributesExW CreateProcessW GetExitCodeProcess WaitForSingleObject MultiByteToWideChar CloseHandle FlushFileBuffers HeapSize HeapReAlloc SetEndOfFile lstrcmpW LocalFree GetCommandLineW VirtualProtect WriteConsoleW FindClose GetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind DecodePointer SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ReadFile GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW SetFilePointerEx GetConsoleMode ReadConsoleW GetFileType HeapAlloc HeapFree CompareStringW LCMapStringW

shell32

CommandLineToArgvW SHGetFolderPathW

user32

TranslateMessage LoadCursorW GetSysColorBrush LoadImageA SendMessageW SetWindowTextW ShowWindow IsWindow SetFocus wsprintfW SetWindowLongW PostQuitMessage LoadImageW DispatchMessageW GrayStringA GetMessageW GetWindowRect SetWindowPos FillRect GetSystemMetrics RedrawWindow MapWindowPoints GetClientRect DrawTextW InvalidateRect GetWindowTextW DefWindowProcW CreateWindowExW RegisterClassW GetDC GetWindowTextLengthW

gdi32

CreateCompatibleDC CreateFontW GetStockObject SetBkColor BitBlt SelectObject SetTextColor SetBkMode GetObjectW CreateSolidBrush

Sharing

General

Malware Config

Signatures

File Explorer

321ebf1c2e57ae454232ee12b6892164

winmm

kernel32

shell32

user32

gdi32

generic