186dcac6a7f97d2530db2b4d2f2470083be2a172f88705d13e460424a8912fc6

General

Target
186dcac6a7f97d2530db2b4d2f2470083be2a172f88705d13e460424a8912fc6
Size 202KB
Sample240101-fffbdabgfj
SHA256 186dcac6a7f97d2530db2b4d2f2470083be2a172f88705d13e460424a8912fc6
MD5 e9afc2dcf90961506d21d24c419da149
SHA1 c4a928375444aa67f58f1d8595c63eb853add0be
SHA512 2afdcabfde46afed7b4cd7e2a7b266b24b5665c81c32ea234cbd7fea2279bdb52aea23ee7a177fbdb958e2ea78c66b04f22f4f9c55c3964aaafcb8b631f79f80
SSDEEP 3072:s89dPLOfs3gaqvo8a9TPWU2QsmndtJOK8tBV6FPrPRVdpC7+o:T9lLOf4gaqvo+1Qn3JzuBV6ZPRc7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
186dcac6a7f97d2530db2b4d2f2470083be2a172f88705d13e460424a8912fc6

File Explorer

186dcac6a7f97d2530db2b4d2f2470083be2a172f88705d13e460424a8912fc6

.exe 202KB

186dcac6a7f97d2530db2b4d2f2470083be2a172f88705d13e460424a8912fc6

IMPHASH 57c906ac3e205b6d86a540919628ea1f
SHA256 186dcac6a7f97d2530db2b4d2f2470083be2a172f88705d13e460424a8912fc6
MD5 e9afc2dcf90961506d21d24c419da149
SHA1 c4a928375444aa67f58f1d8595c63eb853add0be
SHA512 2afdcabfde46afed7b4cd7e2a7b266b24b5665c81c32ea234cbd7fea2279bdb52aea23ee7a177fbdb958e2ea78c66b04f22f4f9c55c3964aaafcb8b631f79f80
SSDEEP 3072:s89dPLOfs3gaqvo8a9TPWU2QsmndtJOK8tBV6FPrPRVdpC7+o:T9lLOf4gaqvo+1Qn3JzuBV6ZPRc7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW QueryDosDeviceA GetComputerNameW GetConsoleAliasesLengthA GlobalFindAtomA LoadLibraryW GetConsoleMode GetSystemWindowsDirectoryA GetVersionExW GlobalFlags WriteConsoleW EnumResourceLanguagesA GetVolumePathNameA FlushInstructionCache InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress WriteConsoleOutputCharacterA RemoveDirectoryA SetComputerNameA SetFileAttributesA InterlockedExchangeAdd LocalAlloc CreateHardLinkW FindFirstVolumeMountPointW TransmitCommChar AddAtomW GetCommMask FoldStringA GetModuleHandleA FindFirstChangeNotificationA GetCurrentProcessId OpenFileMappingA lstrcpyA GetStringTypeA VirtualAlloc HeapCompact InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind HeapFree GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharLowerBuffA

gdi32

SetColorAdjustment GetDeviceGammaRamp

Sharing

General

Malware Config

Signatures

File Explorer

186dcac6a7f97d2530db2b4d2f2470083be2a172f88705d13e460424a8912fc6

kernel32

user32

gdi32

generic