0d662b2ddbfc17b911c68a158a85da5c

General

Target
0d662b2ddbfc17b911c68a158a85da5c
Size 14.7MB
Sample231230-eb3enshcf6
SHA256 bdd2690165b79faa7e2ed30d7dd85f5cfc681b44a08bb442a4fea2078fb0394b
MD5 0d662b2ddbfc17b911c68a158a85da5c
SHA1 72665d36f7c833b45803c35f17f2aa8fe7de69e7
SHA512 3479778605b4b9111233e0d4390997dbd491457ad490da0b592a20b34f64e9b183dd200ddf9359cf415f306b195c120526d9c78eca5ac46471411f4e0913104e
SSDEEP 49152:l/2ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssY:l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d662b2ddbfc17b911c68a158a85da5c

File Explorer

0d662b2ddbfc17b911c68a158a85da5c

.exe 14.7MB

0d662b2ddbfc17b911c68a158a85da5c

IMPHASH 1bd9ec7a4dcb0a443d99b482d9f2b78b
SHA256 bdd2690165b79faa7e2ed30d7dd85f5cfc681b44a08bb442a4fea2078fb0394b
MD5 0d662b2ddbfc17b911c68a158a85da5c
SHA1 72665d36f7c833b45803c35f17f2aa8fe7de69e7
SHA512 3479778605b4b9111233e0d4390997dbd491457ad490da0b592a20b34f64e9b183dd200ddf9359cf415f306b195c120526d9c78eca5ac46471411f4e0913104e
SSDEEP 49152:l/2ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssY:l
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8095

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDefaultCommConfigW WriteConsoleOutputW HeapAlloc EndUpdateResourceW InterlockedIncrement SetEnvironmentVariableW GetEnvironmentStringsW AddConsoleAliasW EnumCalendarInfoExW GetConsoleAliasesLengthA GetConsoleTitleA WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc SetVolumeMountPointA GetSystemWindowsDirectoryA lstrcpynW VerifyVersionInfoA GetModuleFileNameW GetACP LCMapStringA GetCPInfoExW GetProcAddress GetComputerNameExW CreateTimerQueueTimer FreeUserPhysicalPages EnterCriticalSection VerLanguageNameW GetLocalTime LoadLibraryA WaitForMultipleObjects VirtualProtect PeekConsoleInputA GetVersionExA ReadConsoleInputW GetVersion DeleteTimerQueueTimer GetCurrentProcessId FindNextVolumeA CreateThread CreateFileA PulseEvent HeapQueryInformation GetCommandLineW SetStdHandle SetFilePointer WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind LCMapStringW GetStringTypeW GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA HeapSize GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ClientToScreen RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

0d662b2ddbfc17b911c68a158a85da5c

kernel32

user32

generic