918695ad1a945cb75e84a475504d5355

General

Target
918695ad1a945cb75e84a475504d5355
Size 281KB
Sample231226-1ygmdafch8
SHA256 8b7ecaa0849028572361c41866bc0acb5d5f1debcfe1e0762d445b759badbd8b
MD5 918695ad1a945cb75e84a475504d5355
SHA1 6efa61ca7391dc53ad561b95b6552e54c9fd409f
SHA512 3e11610c94c23054a4ef734f47fd7964bc52405f26f647006fb2e40fc0a5e99491b4e90fef92c855628f6385bb8983b91495d8707af42f2b7db8b49858aa534e
SSDEEP 6144:hyrHRTuYO1VuEoIeeQ7b9WHZSnl0ebS/ErKaSo:eHRSYOnuue9f9yZWhbuH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
918695ad1a945cb75e84a475504d5355

File Explorer

918695ad1a945cb75e84a475504d5355

.exe 281KB

918695ad1a945cb75e84a475504d5355

IMPHASH 7fdf275278b640b60b73411e8ed566cf
SHA256 8b7ecaa0849028572361c41866bc0acb5d5f1debcfe1e0762d445b759badbd8b
MD5 918695ad1a945cb75e84a475504d5355
SHA1 6efa61ca7391dc53ad561b95b6552e54c9fd409f
SHA512 3e11610c94c23054a4ef734f47fd7964bc52405f26f647006fb2e40fc0a5e99491b4e90fef92c855628f6385bb8983b91495d8707af42f2b7db8b49858aa534e
SSDEEP 6144:hyrHRTuYO1VuEoIeeQ7b9WHZSnl0ebS/ErKaSo:eHRSYOnuue9f9yZWhbuH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5776

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA UnregisterWait SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages InterlockedIncrement InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW GlobalLock VirtualFree GenerateConsoleCtrlEvent SetCommState SetProcessPriorityBoost TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment GetVersionExW InitAtomTable GlobalFlags GetComputerNameExA GetConsoleAliasW SetConsoleCursorPosition GetBinaryTypeA ReadFile CompareStringW VirtualUnlock GetFileSizeEx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FreeLibraryAndExitThread GetProcAddress VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA WriteProfileSectionA SetStdHandle SetComputerNameA VerLanguageNameW GetLocalTime LoadLibraryA CreateSemaphoreW WriteProfileSectionW SetSystemTime Process32NextW CreateIoCompletionPort SetConsoleTitleW FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect GetCurrentDirectoryA GetFileAttributesExW GetConsoleCursorInfo _lopen FindAtomW GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW ReadConsoleOutputCharacterW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW DeleteFileA FlushFileBuffers GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess TlsGetValue TlsAlloc GetCurrentThreadId TlsFree SetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

user32

GetMessageTime GetMenuInfo

Name

.text

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

112KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

918695ad1a945cb75e84a475504d5355

kernel32

user32

generic