064e16460849b3fc974add9edf795b07

General

Target
064e16460849b3fc974add9edf795b07
Size 686KB
Sample231229-2xvchsddf3
SHA256 7cd14dd834ca1aab6cb21eee48c07c13ae10a9c62d6122aa690ae2ec9809ad80
MD5 064e16460849b3fc974add9edf795b07
SHA1 65e2c615e1827d858bd26ede2e935c702dd175bc
SHA512 7049fb36980a2418f3d4fc8193d5fc371637d417989f1eef45ff98728ca2c2ca536f6edcd2f308d56de5dc30db1dfc9525be3642361c88dc5875b163ac407c23
SSDEEP 12288:SLMjl/Slxd3aQ/0pMkpqLVubFTTH2Sj+L+46YDXgeX8nmUsLsfiTwrcfPohlNT:9jlagGkpqJupTj26+646F4CmdLCowYoF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064e16460849b3fc974add9edf795b07

File Explorer

064e16460849b3fc974add9edf795b07

.exe 686KB

064e16460849b3fc974add9edf795b07

IMPHASH 235826e6e2580e249ef35ac90f832f1b
SHA256 7cd14dd834ca1aab6cb21eee48c07c13ae10a9c62d6122aa690ae2ec9809ad80
MD5 064e16460849b3fc974add9edf795b07
SHA1 65e2c615e1827d858bd26ede2e935c702dd175bc
SHA512 7049fb36980a2418f3d4fc8193d5fc371637d417989f1eef45ff98728ca2c2ca536f6edcd2f308d56de5dc30db1dfc9525be3642361c88dc5875b163ac407c23
SSDEEP 12288:SLMjl/Slxd3aQ/0pMkpqLVubFTTH2Sj+L+46YDXgeX8nmUsLsfiTwrcfPohlNT:9jlagGkpqJupTj26+646F4CmdLCowYoF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait GetFileSize GetNativeSystemInfo SetFilePointer GetConsoleAliasesLengthW CopyFileExW SetLocalTime InterlockedIncrement VerSetConditionMask InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW SetEnvironmentVariableW GlobalLock SetConsoleScreenBufferSize WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA VirtualFree SetProcessPriorityBoost FindResourceExA GetConsoleAliasExesLengthW GetComputerNameExA CreateSemaphoreA GetFileAttributesW GetBinaryTypeA ReadFile EnumResourceNamesW CompareStringW lstrlenW InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW OpenMutexW GetCurrentDirectoryW GetProcAddress CreateNamedPipeA WriteProfileSectionA ReadFileEx SetStdHandle DisableThreadLibraryCalls GetPrivateProfileStringA LoadLibraryA GetConsoleScreenBufferInfo LocalAlloc PostQueuedCompletionStatus FindAtomA WriteProfileStringW FatalAppExitA GetVersionExA TlsAlloc DeleteFileW LCMapStringW AreFileApisANSI GetOverlappedResult GetComputerNameA GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar GetStringTypeA GetStringTypeW GetModuleHandleA LCMapStringA GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetBoundsRect

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

064e16460849b3fc974add9edf795b07

kernel32

gdi32

winhttp

generic