1aef2863189592b4611b716580ba9839

General

Target
1aef2863189592b4611b716580ba9839
Size 655KB
Sample231230-rd9b8aechq
SHA256 6329cbb5c3eea2100396762e7051b8243343180531ec0ff785ff2bb4d928c134
MD5 1aef2863189592b4611b716580ba9839
SHA1 ba7fdb27da314f12fab2ee99e21b6bf7e5fec95f
SHA512 fce8eb0d18f00860e9d964a0679d05a0e998df4f749d8aaf89c1367f0fc4d64d9cad31c2f591bca3cff4a38398ab7ed955b74ef2ba87041f0ed7261d3e2681c3
SSDEEP 12288:VSibX01Zatvz+E0Z90hS86mQUHoHBqp2JhqtgI8iN2e78VxvW3:4Ik1Z1gS86mILqtPn78VxvW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1aef2863189592b4611b716580ba9839

File Explorer

1aef2863189592b4611b716580ba9839

.exe 655KB

1aef2863189592b4611b716580ba9839

IMPHASH 346d1123531c92f702a30851f3faa86c
SHA256 6329cbb5c3eea2100396762e7051b8243343180531ec0ff785ff2bb4d928c134
MD5 1aef2863189592b4611b716580ba9839
SHA1 ba7fdb27da314f12fab2ee99e21b6bf7e5fec95f
SHA512 fce8eb0d18f00860e9d964a0679d05a0e998df4f749d8aaf89c1367f0fc4d64d9cad31c2f591bca3cff4a38398ab7ed955b74ef2ba87041f0ed7261d3e2681c3
SSDEEP 12288:VSibX01Zatvz+E0Z90hS86mQUHoHBqp2JhqtgI8iN2e78VxvW3:4Ik1Z1gS86mILqtPn78VxvW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime EnumResourceNamesW SetPriorityClass WriteConsoleInputW SetFilePointer GetConsoleAliasesLengthW CopyFileExW InterlockedIncrement InterlockedDecrement WaitNamedPipeA CreateDirectoryW GlobalLock SetComputerNameW GetComputerNameW SetEvent FreeEnvironmentStringsA GetTickCount VirtualFree GetCommandLineA GetVolumeInformationA LoadLibraryW GetSystemWow64DirectoryW InitAtomTable GetFileAttributesA IsProcessorFeaturePresent CreateSemaphoreA SetConsoleCursorPosition GetSystemDirectoryA CompareStringW lstrlenW ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCPInfoExW OpenMutexW GetHandleInformation GetLastError GetProcAddress GetProcessHeaps CreateNamedPipeA WriteProfileSectionA ReadFileEx CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA GetConsoleScreenBufferInfo LocalAlloc GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA FatalAppExitA GetCPInfoExA OpenSemaphoreW GetVersionExA TlsAlloc FindAtomW UnregisterWaitEx GetSystemTime LCMapStringW MoveFileA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree SetLastError Sleep ExitProcess SetHandleCount GetStdHandle GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA InitializeCriticalSectionAndSpinCount FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

1aef2863189592b4611b716580ba9839

kernel32

generic