b8942003646174e29e455a555fbc94cb

General

Target
b8942003646174e29e455a555fbc94cb
Size 300KB
Sample231227-2g23esacd2
SHA256 7527ca1a945babb9d1122c98c466d0b122300a6bde28e32750d3d3d7416a2f1a
MD5 b8942003646174e29e455a555fbc94cb
SHA1 4ed0eafc8841684708ab64c360e4d8047f2b4a1d
SHA512 1717161f805432e90dfb59cb9cd8c1a0c10850f4fbb1ed5d03ba78738bd49feffd5e704f67f7b2620bc51c9d34fa6e0fd966fbdd9942f4f8ac64e950593d6ac5
SSDEEP 6144:Gr1TCrxzJnkTi/veYQsHGLY1LyXjlrFzBnmytldWgy:Gr1TCnk+3yMVyzLhm2ld
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8942003646174e29e455a555fbc94cb

File Explorer

b8942003646174e29e455a555fbc94cb

.exe 300KB

b8942003646174e29e455a555fbc94cb

IMPHASH 3eac5b5e5faf9fcbf5ceb4c621ad64f8
SHA256 7527ca1a945babb9d1122c98c466d0b122300a6bde28e32750d3d3d7416a2f1a
MD5 b8942003646174e29e455a555fbc94cb
SHA1 4ed0eafc8841684708ab64c360e4d8047f2b4a1d
SHA512 1717161f805432e90dfb59cb9cd8c1a0c10850f4fbb1ed5d03ba78738bd49feffd5e704f67f7b2620bc51c9d34fa6e0fd966fbdd9942f4f8ac64e950593d6ac5
SSDEEP 6144:Gr1TCrxzJnkTi/veYQsHGLY1LyXjlrFzBnmytldWgy:Gr1TCnk+3yMVyzLhm2ld
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

123830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EraseTape GetLongPathNameA GetUserDefaultLangID AddRefActCtx GetCPInfoExW WriteConsoleInputA ReadConsoleInputW GetConsoleAliasW SetCommTimeouts SetConsoleCP VerifyVersionInfoA WaitNamedPipeA CreateMutexA WriteConsoleW GetLastError CreateFileA WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA SetStdHandle LoadLibraryA RequestDeviceWakeup FindFirstVolumeA ReadFile BuildCommDCBA VerLanguageNameW SetFileApisToANSI WriteProcessMemory RequestWakeupLatency ResetEvent Sleep EndUpdateResourceW GetCPInfo SetConsoleCtrlHandler LeaveCriticalSection GenerateConsoleCtrlEvent GetCurrentConsoleFont SetConsoleTextAttribute AttachConsole GetConsoleAliasesLengthW ZombifyActCtx ReadConsoleOutputW GetSystemWindowsDirectoryA GetStringTypeW BuildCommDCBAndTimeoutsA HeapAlloc HeapLock GetAtomNameW HeapReAlloc HeapValidate GetGeoInfoA GetCurrentProcess GetProcAddress GetModuleHandleA CreateThread GetVersionExA GetACP WaitForMultipleObjects WaitForSingleObject GetSystemPowerStatus WriteConsoleOutputCharacterA LocalAlloc GetMailslotInfo SetEnvironmentVariableW GetFileAttributesExA GetComputerNameW CommConfigDialogA GetConsoleWindow PostQueuedCompletionStatus GetDiskFreeSpaceW EnumDateFormatsA SetConsoleTitleA InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW DeleteCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetFilePointer TerminateProcess IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW CloseHandle

advapi32

AdjustTokenPrivileges BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

b8942003646174e29e455a555fbc94cb

kernel32

advapi32

generic