13dd0827b92b0585427a935b94ff4315

General

Target
13dd0827b92b0585427a935b94ff4315
Size 373KB
Sample231230-kvz2jsdeem
SHA256 71f3cc0ec781decc2aa981cedabe905490525e0260cc52e2763746d452b26349
MD5 13dd0827b92b0585427a935b94ff4315
SHA1 1c3129cea5fffe8a8538f408cf20a59a17602485
SHA512 301e9c8699deb73bbb1cecc0345bc6b633115911269def60aad05e6a933daa40ce83d9b5f80e3d653c8c89335dbc905ce4943e2543583851131919d683c33c71
SSDEEP 6144:tG1S40Rf6XxVGxNO4PwG0/evYI2CGqDmeyzlS/t2L6X39Pio3jwXr86j:iSxRSBVGi4PwL/eQI2Kmbzg/tYO9qo07
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13dd0827b92b0585427a935b94ff4315

File Explorer

13dd0827b92b0585427a935b94ff4315

.exe 373KB

13dd0827b92b0585427a935b94ff4315

IMPHASH fc0498b1146c20d46fc85d16ea8a2b68
SHA256 71f3cc0ec781decc2aa981cedabe905490525e0260cc52e2763746d452b26349
MD5 13dd0827b92b0585427a935b94ff4315
SHA1 1c3129cea5fffe8a8538f408cf20a59a17602485
SHA512 301e9c8699deb73bbb1cecc0345bc6b633115911269def60aad05e6a933daa40ce83d9b5f80e3d653c8c89335dbc905ce4943e2543583851131919d683c33c71
SSDEEP 6144:tG1S40Rf6XxVGxNO4PwG0/evYI2CGqDmeyzlS/t2L6X39Pio3jwXr86j:iSxRSBVGi4PwL/eQI2Kmbzg/tYO9qo07
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext GetNativeSystemInfo SetFilePointer lstrlenA CopyFileExW TlsGetValue SetLocalTime InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement CompareFileTime GlobalLock WaitForSingleObject SetEvent OpenSemaphoreA FreeEnvironmentStringsA GetTickCount CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetCommandLineA GetDriveTypeA GetPriorityClass LoadLibraryW TerminateThread GetSystemWindowsDirectoryA GetVersionExW SetConsoleMode SetConsoleCursorPosition ReadFile GetOverlappedResult CompareStringW GetStartupInfoW GetNamedPipeHandleStateW GetPrivateProfileIntW CreateDirectoryA GetFileSizeEx SetCurrentDirectoryA SetThreadLocale GetLastError IsDBCSLeadByteEx ReadConsoleOutputCharacterA GetProcAddress CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA LocalAlloc IsSystemResumeAutomatic WriteProfileSectionW HeapWalk SetNamedPipeHandleState WriteProfileStringA SetConsoleTitleW FindFirstChangeNotificationA FreeEnvironmentStringsW EnumResourceNamesA FatalAppExitA GetCurrentThreadId GetCPInfoExA FindAtomW LCMapStringW DeleteFileA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle TlsAlloc TlsSetValue TlsFree SetLastError TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

13dd0827b92b0585427a935b94ff4315

kernel32

user32

winhttp

generic