0dbdba6f102e5d4b18518e7cbf4a2e38

General

Target
0dbdba6f102e5d4b18518e7cbf4a2e38
Size 575KB
Sample231230-ek7qrabde5
SHA256 ba852a2b1acc3b7c2bb98e6acbe41948de4e8046bbf6c3a874d7462f23d19f1e
MD5 0dbdba6f102e5d4b18518e7cbf4a2e38
SHA1 42239bf215805016ac0e02f049f6012718fee8d7
SHA512 a0ff8061e52a6adb7cf0fbdd4987c580c32b6115e534e51790ecb3d0051187cfe29ca7000720a0b7de58464c017f7a9bad17617facceba2881c7977480ce1a60
SSDEEP 12288:zmiA96DUD62JYNUm7SeVgK4POrF86GUbcSdFlpsc:zhXDU3JYWygK4POrdDFdpt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dbdba6f102e5d4b18518e7cbf4a2e38

File Explorer

0dbdba6f102e5d4b18518e7cbf4a2e38

.exe 575KB

0dbdba6f102e5d4b18518e7cbf4a2e38

IMPHASH 53c59b75f4f7c3e4cf3b5a4fc5238353
SHA256 ba852a2b1acc3b7c2bb98e6acbe41948de4e8046bbf6c3a874d7462f23d19f1e
MD5 0dbdba6f102e5d4b18518e7cbf4a2e38
SHA1 42239bf215805016ac0e02f049f6012718fee8d7
SHA512 a0ff8061e52a6adb7cf0fbdd4987c580c32b6115e534e51790ecb3d0051187cfe29ca7000720a0b7de58464c017f7a9bad17617facceba2881c7977480ce1a60
SSDEEP 12288:zmiA96DUD62JYNUm7SeVgK4POrF86GUbcSdFlpsc:zhXDU3JYWygK4POrdDFdpt
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

83088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryW CreateFileW DeleteFileW FileTimeToLocalFileTime FindClose FindFirstFileW FindNextFileW GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW GetShortPathNameW GetTempFileNameW GetVolumeInformationW ReadFile RemoveDirectoryW SetFileAttributesW SetFilePointer SetFilePointerEx WriteFile GetTempPathW CloseHandle DuplicateHandle GetLastError SetLastError HeapReAlloc GetProcessHeap WaitForSingleObject GetCurrentProcess ExitProcess GetExitCodeProcess CreateProcessW GetStartupInfoW GetLocalTime GetSystemDirectoryW GetWindowsDirectoryW GetModuleHandleW GetProcAddress LocalAlloc LocalFree SearchPathW lstrcmpW lstrcmpiW lstrcpynW lstrcpyW lstrcatW lstrlenW CopyFileW MoveFileW MoveFileExW CreateHardLinkW SetVolumeLabelW FileTimeToSystemTime CreateSymbolicLinkW GetDateFormatW GetTimeFormatW CompareStringW MultiByteToWideChar WideCharToMultiByte GetConsoleCP GetConsoleOutputCP GetConsoleMode SetConsoleMode ReadConsoleW WriteConsoleW FillConsoleOutputCharacterW FillConsoleOutputAttribute GetConsoleScreenBufferInfo SetConsoleCursorPosition SetConsoleTextAttribute SetConsoleTitleW FlushFileBuffers HeapSize GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetFileType GetCurrentDirectoryW SetCurrentDirectoryW ExpandEnvironmentStringsW SetEnvironmentVariableW GetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetStdHandle FormatMessageW GetStdHandle HeapAlloc HeapFree GetStringTypeW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent TerminateProcess RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RaiseException GetModuleFileNameW GetModuleHandleExW GetCommandLineA LCMapStringW DecodePointer

user32

GetDC GrayStringA MessageBoxA IsCharAlphaW CharNextExA CharUpperBuffW wsprintfW LoadStringW IsCharAlphaNumericW

advapi32

RegSetValueExW RegQueryValueExW RegOpenKeyExW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW RegCloseKey LookupAccountSidW GetSecurityDescriptorOwner GetFileSecurityW

shell32

FindExecutableW SHFileOperationW SHGetFileInfoW

Sharing

General

Malware Config

Signatures

File Explorer

0dbdba6f102e5d4b18518e7cbf4a2e38

kernel32

user32

advapi32

shell32

generic