4f92ce5765f94bd48e7c7da80b875a85

General

Target
4f92ce5765f94bd48e7c7da80b875a85
Size 393KB
Sample231226-dtfg7aebcp
SHA256 e6ca1e398a15b88683772fe3c2dd20d5fb043263fa914d2a95bade350b81bc70
MD5 4f92ce5765f94bd48e7c7da80b875a85
SHA1 abb1913e7619d24751bf7eded7639f14f273a9d9
SHA512 2948fb685ca10bc5091da46f82fa7eddbebf2fe59aed32f3a53bcffa843d899568f8c992941faf720485906abd077a50f384199f1aa93e0b5fe48c5b4bc43ce8
SSDEEP 3072:IsxuLdEeI46QXMmAIX1tanUKmpKNnDAmt26w79mZWXyaiedMbrN6pnoXPBsr5ZrG:FupI4HMKF6xDm9SNaPM4loo5ZK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f92ce5765f94bd48e7c7da80b875a85

File Explorer

4f92ce5765f94bd48e7c7da80b875a85

.exe 393KB

4f92ce5765f94bd48e7c7da80b875a85

IMPHASH cbd0bb56cd774e0dca7795e4d1e62ebd
SHA256 e6ca1e398a15b88683772fe3c2dd20d5fb043263fa914d2a95bade350b81bc70
MD5 4f92ce5765f94bd48e7c7da80b875a85
SHA1 abb1913e7619d24751bf7eded7639f14f273a9d9
SHA512 2948fb685ca10bc5091da46f82fa7eddbebf2fe59aed32f3a53bcffa843d899568f8c992941faf720485906abd077a50f384199f1aa93e0b5fe48c5b4bc43ce8
SSDEEP 3072:IsxuLdEeI46QXMmAIX1tanUKmpKNnDAmt26w79mZWXyaiedMbrN6pnoXPBsr5ZrG:FupI4HMKF6xDm9SNaPM4loo5ZK
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

0

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocateUserPhysicalPages BaseCleanupAppcompatCacheSupport BaseInitAppcompatCache BuildCommDCBAndTimeoutsA BuildCommDCBW CallNamedPipeW CheckNameLegalDOS8Dot3W CommConfigDialogA CommConfigDialogW ConvertDefaultLocale ConvertThreadToFiber CopyFileExA CreateDirectoryExA CreateFileA CreateFileW CreateMutexA CreateNamedPipeW CreateProcessInternalA CreateProcessInternalW CreateProcessW DefineDosDeviceW DeleteCriticalSection DeleteVolumeMountPointW DnsHostnameToComputerNameW DuplicateConsoleHandle DuplicateHandle EncodePointer EnumCalendarInfoA EnumResourceNamesW EnumResourceTypesA EnumSystemLocalesW EnumUILanguagesW EscapeCommFunction FileTimeToDosDateTime FileTimeToLocalFileTime FindFirstFileA FindFirstFileExA FindResourceA FoldStringW FormatMessageW FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibraryAndExitThread GetAtomNameW GetCPInfoExA GetConsoleAliasesA GetConsoleAliasesW GetConsoleInputWaitHandle GetConsoleProcessList GetCurrentDirectoryA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDefaultSortkeySize GetDevicePowerState GetDiskFreeSpaceA GetDiskFreeSpaceExA GetDriveTypeW GetEnvironmentStrings GetModuleFileNameA GetModuleHandleA GetNamedPipeInfo GetNumberOfConsoleFonts GetPrivateProfileIntW GetPrivateProfileSectionW GetProcAddress GetProcessPriorityBoost GetProcessWorkingSetSize GetSystemDefaultLCID GetTempFileNameW GetThreadContext GetThreadTimes GetUserDefaultLangID GetUserDefaultUILanguage GetVolumeInformationA GetVolumePathNameA GetWindowsDirectoryA GlobalAlloc GlobalGetAtomNameA Heap32ListNext HeapCompact HeapDestroy HeapQueryTagW HeapReAlloc HeapSetInformation InterlockedFlushSList InterlockedPushEntrySList IsBadStringPtrW LCMapStringW LZCopy LZOpenFileA LZStart LeaveCriticalSection LoadLibraryA LoadLibraryExA Module32First MoveFileExA MulDiv NumaVirtualQueryNode OpenFile OpenJobObjectW OpenMutexW OutputDebugStringW PrivCopyFileExW Process32First ReadConsoleInputA ReadFileEx ReadFileScatter RegisterWaitForSingleObjectEx RegisterWowExec RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureStackBackTrace SetConsoleActiveScreenBuffer SetConsoleTextAttribute SetConsoleTitleA SetDefaultCommConfigW SetFileShortNameA SetFileValidData SetLastConsoleEventActive SetLocalPrimaryComputerNameW SetNamedPipeHandleState SetSystemTime SetVolumeMountPointA Sleep SwitchToFiber SwitchToThread TlsGetValue TlsSetValue TzSpecificLocalTimeToSystemTime UTRegister UnhandledExceptionFilter ValidateLocale VerifyVersionInfoW VirtualProtect WriteConsoleOutputCharacterW WriteConsoleOutputW WriteProcessMemory WriteProfileSectionA WriteTapemark lstrcmp

Sharing

General

Malware Config

Signatures

File Explorer

4f92ce5765f94bd48e7c7da80b875a85

kernel32

generic