80d5a0defa331caea1ebe788bf1dc116

General

Target
80d5a0defa331caea1ebe788bf1dc116
Size 4.1MB
Sample231226-v411babeg6
SHA256 d3a486d3b032834b1203adefd25d0bf0b36fae7f9e72071c21ccc266e1e1f893
MD5 80d5a0defa331caea1ebe788bf1dc116
SHA1 471408a3a30f345e70e40ec306e99bf514b30726
SHA512 82f3cf4cde2f2d96673f1de63216a369520493889329d38b2a688f89446a0350fbc200a83c172deefdaa20f9f44bc388762484718dfb50212ba825bd5c3227dd
SSDEEP 49152:qdVNhdTN5cWr9GnzpMZ/eKL4cJtkNu/ugum94gDxNLtdHvhkIpxVVEZGZapnhlkD:qdVNxkKeW424u/ug9DVSdlYg7mrPiVo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80d5a0defa331caea1ebe788bf1dc116

File Explorer

80d5a0defa331caea1ebe788bf1dc116

.exe 4.1MB

80d5a0defa331caea1ebe788bf1dc116

IMPHASH adc3f3d8cd628977e3330632c95070dd
SHA256 d3a486d3b032834b1203adefd25d0bf0b36fae7f9e72071c21ccc266e1e1f893
MD5 80d5a0defa331caea1ebe788bf1dc116
SHA1 471408a3a30f345e70e40ec306e99bf514b30726
SHA512 82f3cf4cde2f2d96673f1de63216a369520493889329d38b2a688f89446a0350fbc200a83c172deefdaa20f9f44bc388762484718dfb50212ba825bd5c3227dd
SSDEEP 49152:qdVNhdTN5cWr9GnzpMZ/eKL4cJtkNu/ugum94gDxNLtdHvhkIpxVVEZGZapnhlkD:qdVNxkKeW424u/ug9DVSdlYg7mrPiVo
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

3388363

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ntdll

NtCancelIoFileEx RtlCaptureContext NtDeviceIoControlFile RtlNtStatusToDosError RtlUnwind

advapi32

SystemFunction036

kernel32

SetFilePointerEx CreateFileW DecodePointer GetCurrentProcess GetEnvironmentStrings GetTickCount GetLastError GetVersion GetProcessHeap GetCommandLineA HeapAlloc HeapFree HeapReAlloc AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection ReleaseSRWLockExclusive AddVectoredExceptionHandler SetThreadStackGuarantee GetSystemInfo CreateThread CloseHandle VirtualAlloc SetLastError GetFinalPathNameByHandleW GetQueuedCompletionStatusEx Sleep GetModuleHandleA GetProcAddress TlsGetValue TlsSetValue AcquireSRWLockShared ReleaseSRWLockShared GetEnvironmentVariableW GetStdHandle GetConsoleMode WriteFile WriteConsoleW GetCurrentDirectoryW GetCurrentThread ReleaseMutex WaitForSingleObjectEx LoadLibraryA CreateMutexA TlsAlloc GetModuleHandleW FormatMessageW InitializeCriticalSection TryEnterCriticalSection QueryPerformanceCounter QueryPerformanceFrequency CreateIoCompletionPort PostQueuedCompletionStatus SwitchToThread WaitForSingleObject FlushFileBuffers GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsFree FreeLibrary LoadLibraryExW RaiseException GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW HeapSize GetConsoleCP

Sharing

General

Malware Config

Signatures

File Explorer

80d5a0defa331caea1ebe788bf1dc116

ntdll

advapi32

kernel32

generic