906dd907cc61f0f12a1c6e64e1493a40

General

Target
906dd907cc61f0f12a1c6e64e1493a40
Size 373KB
Sample231226-1e4msscacl
SHA256 fc630128092eaf809cc5312c1f15c344ec75c376902bf9c2eae3af1b1750c759
MD5 906dd907cc61f0f12a1c6e64e1493a40
SHA1 d00a0a38bdc0377242f89a63424a4b04c97b9092
SHA512 4060db442a51fad54ed8f4b9c35195d31a7e89b114ca6dcc96852cf0ccb17d34bd7b8e7154bea56dd57dbabf8f54ad00bacbe8f41b968f87741c655dcdb28382
SSDEEP 6144:UJW5u7f1zrVKwQDadNECfwBh6PRDRpDH5radoZaeOmOdonUDyT:7Mf1HxQDuEjBhA/ZHdceaWUDy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
906dd907cc61f0f12a1c6e64e1493a40

File Explorer

906dd907cc61f0f12a1c6e64e1493a40

.exe 373KB

906dd907cc61f0f12a1c6e64e1493a40

IMPHASH 800102d28cf35c665bee356e0e434ad6
SHA256 fc630128092eaf809cc5312c1f15c344ec75c376902bf9c2eae3af1b1750c759
MD5 906dd907cc61f0f12a1c6e64e1493a40
SHA1 d00a0a38bdc0377242f89a63424a4b04c97b9092
SHA512 4060db442a51fad54ed8f4b9c35195d31a7e89b114ca6dcc96852cf0ccb17d34bd7b8e7154bea56dd57dbabf8f54ad00bacbe8f41b968f87741c655dcdb28382
SSDEEP 6144:UJW5u7f1zrVKwQDadNECfwBh6PRDRpDH5radoZaeOmOdonUDyT:7Mf1HxQDuEjBhA/ZHdceaWUDy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetComputerNameA GetFileSize SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx GlobalLock GetProfileSectionA SetComputerNameW GetFileAttributesExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig LocalFlags GetConsoleAliasesLengthA GetWindowsDirectoryA SetCommState TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemWindowsDirectoryA GetSystemTimeAdjustment InitAtomTable GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW SetConsoleTitleA VirtualUnlock LCMapStringA SetCurrentDirectoryA GetStartupInfoA GetStdHandle GetCPInfoExW GetCurrentDirectoryW VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA GetLocalTime LoadLibraryA CreateSemaphoreW SetConsoleCtrlHandler WriteProfileSectionW Process32NextW CreateIoCompletionPort EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect _lopen FindAtomW GetVersion DeleteFileW UnregisterWaitEx ReadConsoleOutputCharacterW AreFileApisANSI CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

GetMessageTime GetMenuInfo

Name

.text

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

113KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

906dd907cc61f0f12a1c6e64e1493a40

kernel32

user32

generic