07ceef005d2626297437e3289872bf40

General

Target
07ceef005d2626297437e3289872bf40
Size 326KB
Sample231229-313zhacfcj
SHA256 4d850649831a4cad6dd9d2a6b67fbacc70933c15dd4bd56ff6ffdb27da7aa4a8
MD5 07ceef005d2626297437e3289872bf40
SHA1 d1735d9e00c820525c6005b2e339a4ac0882efa9
SHA512 d4979eb0452c285997fd55fa9873e98f6281f442900e1238ce5a5d9c00b11f26ba1de7a484de50de391f5a7492969f685868e46d4660a23b44602dcdfb44610a
SSDEEP 6144:7ZqLyrRhjz2YKt3MdauLJb3mZ6JJhrr5Ktxxs23:AYRhjKvt3Mda0b2QTVFos2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07ceef005d2626297437e3289872bf40

File Explorer

07ceef005d2626297437e3289872bf40

.exe 326KB

07ceef005d2626297437e3289872bf40

IMPHASH 4af0c4da1571e02aa1a31b1c0ae85007
SHA256 4d850649831a4cad6dd9d2a6b67fbacc70933c15dd4bd56ff6ffdb27da7aa4a8
MD5 07ceef005d2626297437e3289872bf40
SHA1 d1735d9e00c820525c6005b2e339a4ac0882efa9
SHA512 d4979eb0452c285997fd55fa9873e98f6281f442900e1238ce5a5d9c00b11f26ba1de7a484de50de391f5a7492969f685868e46d4660a23b44602dcdfb44610a
SSDEEP 6144:7ZqLyrRhjz2YKt3MdauLJb3mZ6JJhrr5Ktxxs23:AYRhjKvt3Mda0b2QTVFos2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA FindResourceExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile TlsSetValue GetEnvironmentStrings GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile GetSystemDirectoryA GetBinaryTypeW ExitThread DeactivateActCtx CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCurrentDirectoryW GetProcAddress GetProcessHeaps VerLanguageNameA CreateNamedPipeA SetStdHandle SetComputerNameA BuildCommDCBW GetLocalTime LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW VirtualLock WriteProfileStringA SetConsoleTitleW VirtualProtect CompareStringA GetFileAttributesExW GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId ReadConsoleOutputCharacterW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW GetModuleHandleA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

GetListBoxInfo GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

07ceef005d2626297437e3289872bf40

kernel32

user32

generic