b810b3df4aaf058ea31749fbe2c0bf03

General

Target
b810b3df4aaf058ea31749fbe2c0bf03
Size 337KB
Sample231227-2bls9ahed2
SHA256 e40c5c5eedb3e59bd16085027e6a92bbd4d36c347d4e807dffecee8278207640
MD5 b810b3df4aaf058ea31749fbe2c0bf03
SHA1 a6bdd9d6306a8f65d6e5f2e2fa1bb6f9c131d299
SHA512 12cb32ab8fa98757ce5633db7731b8a60b253cdb3879a0501fe0a5ca57c14a75cc33a9e73c3dde5ee379f2db9753e54024afb259829bab7f7f038195aeea9bf7
SSDEEP 6144:nHgSDp7VD/SRD0Vn5ip5SQHEA1fe+b9vAdRXfQV:n9RD/SRWn5iewXxbVAfw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b810b3df4aaf058ea31749fbe2c0bf03

File Explorer

b810b3df4aaf058ea31749fbe2c0bf03

.exe 337KB

b810b3df4aaf058ea31749fbe2c0bf03

IMPHASH 39acbbcf6426a89e2dc936bbf317bfd5
SHA256 e40c5c5eedb3e59bd16085027e6a92bbd4d36c347d4e807dffecee8278207640
MD5 b810b3df4aaf058ea31749fbe2c0bf03
SHA1 a6bdd9d6306a8f65d6e5f2e2fa1bb6f9c131d299
SHA512 12cb32ab8fa98757ce5633db7731b8a60b253cdb3879a0501fe0a5ca57c14a75cc33a9e73c3dde5ee379f2db9753e54024afb259829bab7f7f038195aeea9bf7
SSDEEP 6144:nHgSDp7VD/SRD0Vn5ip5SQHEA1fe+b9vAdRXfQV:n9RD/SRWn5iewXxbVAfw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait GetFileSize GetNativeSystemInfo SetFilePointer GetConsoleAliasesLengthW CopyFileExW SetLocalTime InterlockedIncrement VerSetConditionMask InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW SetEnvironmentVariableW GlobalLock SetConsoleScreenBufferSize WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA VirtualFree SetProcessPriorityBoost ActivateActCtx FindResourceExA LoadLibraryW GetConsoleAliasExesLengthW GetComputerNameExA CreateSemaphoreA GetFileAttributesW GetBinaryTypeA EnumResourceNamesW GetOverlappedResult CompareStringW lstrlenW InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW OpenMutexW GetCurrentDirectoryW GetProcAddress CreateNamedPipeA WriteProfileSectionA ReadFileEx SetStdHandle DisableThreadLibraryCalls GetPrivateProfileStringA LoadLibraryA GetConsoleScreenBufferInfo LocalAlloc PostQueuedCompletionStatus FindAtomA WriteProfileStringW FatalAppExitA GetVersionExA TlsAlloc DeleteFileW LCMapStringW AreFileApisANSI ReadFile GetComputerNameA GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetModuleHandleA LCMapStringA GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetBoundsRect

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

b810b3df4aaf058ea31749fbe2c0bf03

kernel32

gdi32

winhttp

generic