0e970c0c6f2856a75e87e34ae7b7bc82

General

Target
0e970c0c6f2856a75e87e34ae7b7bc82
Size 691KB
Sample231230-e6jaaagbh7
SHA256 c1556f21883ad0e05a4e9899519bb7f8b1d50af7f0fabe88baae09e157e89985
MD5 0e970c0c6f2856a75e87e34ae7b7bc82
SHA1 60c099f33de2e3d5d45faabd22a86ef4fed4b5cf
SHA512 cb1767b0014f9f304ee2c3951ec44792dde2aab22cac4cdb7dffce13b1f2594536fe0fc79d79b333a11b95e9a242d8bc84869bc1f7e3c5171084cd3dec3524a4
SSDEEP 12288:zr/JbPutxxZhk/DRw8JjEokdI3cKi04Iq3fXFQeDpv9HNosQG1IbMAJ7EujiZAi:v9yMHJXkd/j04IOf1dGbnPpEuji
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e970c0c6f2856a75e87e34ae7b7bc82

File Explorer

0e970c0c6f2856a75e87e34ae7b7bc82

.exe 691KB

0e970c0c6f2856a75e87e34ae7b7bc82

IMPHASH 4f8209c5b4ed49d19335a3290f6cce63
SHA256 c1556f21883ad0e05a4e9899519bb7f8b1d50af7f0fabe88baae09e157e89985
MD5 0e970c0c6f2856a75e87e34ae7b7bc82
SHA1 60c099f33de2e3d5d45faabd22a86ef4fed4b5cf
SHA512 cb1767b0014f9f304ee2c3951ec44792dde2aab22cac4cdb7dffce13b1f2594536fe0fc79d79b333a11b95e9a242d8bc84869bc1f7e3c5171084cd3dec3524a4
SSDEEP 12288:zr/JbPutxxZhk/DRw8JjEokdI3cKi04Iq3fXFQeDpv9HNosQG1IbMAJ7EujiZAi:v9yMHJXkd/j04IOf1dGbnPpEuji
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime GetNativeSystemInfo lstrlenA CopyFileExW GetStringTypeA InterlockedIncrement ReadConsoleA InterlockedDecrement CompareFileTime GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetCurrentThread WriteFile SetCommState GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW GlobalFlags GetExitCodeProcess IsDBCSLeadByte ReadFile SetThreadPriority GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW CreateDirectoryA GetStartupInfoA SetThreadLocale GetLastError GetProcAddress GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA GetFileType SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA Process32NextW CreateIoCompletionPort QueryMemoryResourceNotification EnumResourceNamesA GetCPInfoExA TlsAlloc ReadConsoleOutputCharacterW GetSystemTime DeleteFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA GetModuleHandleA

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

0e970c0c6f2856a75e87e34ae7b7bc82

kernel32

user32

msimg32

generic