4d111d4092dfac21e2de0cfc868b4fc5

General

Target
4d111d4092dfac21e2de0cfc868b4fc5
Size 653KB
Sample231226-c3twhaahd7
SHA256 4ddb07c2e42dc5505d734dbb196c5518b4537b3c8695ecdf44ca87e4b2391ceb
MD5 4d111d4092dfac21e2de0cfc868b4fc5
SHA1 c9017cc3b8b90e61c3f9eadeab4399264ae67727
SHA512 a1bac5362c8a8839cd0f74b9220b5c3de3f1a1118a5702ee0adfdb854c4ab30f08aa88e2bf7c1f5fe8dd6fc98c097971871428a7cbc06bd0d8ff08cf1de8b6ef
SSDEEP 12288:F8iMc6N2YsQAymDIQLt/ppW3E/TsqNKlZ+qSHnyRwJ2FALrW1i3JF9:B6N2Y6zL1jW38lNKlZqHpJxrl39
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d111d4092dfac21e2de0cfc868b4fc5

File Explorer

4d111d4092dfac21e2de0cfc868b4fc5

.exe 653KB

4d111d4092dfac21e2de0cfc868b4fc5

IMPHASH ce1fdab3df1e2c070cc03b5d515ae746
SHA256 4ddb07c2e42dc5505d734dbb196c5518b4537b3c8695ecdf44ca87e4b2391ceb
MD5 4d111d4092dfac21e2de0cfc868b4fc5
SHA1 c9017cc3b8b90e61c3f9eadeab4399264ae67727
SHA512 a1bac5362c8a8839cd0f74b9220b5c3de3f1a1118a5702ee0adfdb854c4ab30f08aa88e2bf7c1f5fe8dd6fc98c097971871428a7cbc06bd0d8ff08cf1de8b6ef
SSDEEP 12288:F8iMc6N2YsQAymDIQLt/ppW3E/TsqNKlZ+qSHnyRwJ2FALrW1i3JF9:B6N2Y6zL1jW38lNKlZqHpJxrl39
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA SetLocalTime FindResourceExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile TlsSetValue GlobalAlloc VirtualFreeEx LoadLibraryW GetConsoleMode _hread GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile GetSystemDirectoryA GetBinaryTypeW ExitThread VirtualUnlock DeactivateActCtx CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCPInfoExW GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress GetProcessHeaps CreateNamedPipeA SetStdHandle SetComputerNameA VerLanguageNameW BuildCommDCBW LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW SetConsoleWindowInfo FindAtomA SetConsoleTitleW QueryMemoryResourceNotification WriteProfileStringW VirtualProtect CompareStringA GetFileAttributesExW _lopen TlsAlloc GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId GetProfileSectionW LCMapStringW CopyFileExA CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP InitializeCriticalSectionAndSpinCount FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA GetModuleHandleA

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

4d111d4092dfac21e2de0cfc868b4fc5

kernel32

user32

generic