3f859a64f3e4d5360f4bfd62c6422f0d

General

Target
3f859a64f3e4d5360f4bfd62c6422f0d
Size 265KB
Sample240104-bkt8waebek
SHA256 4e5c4004aec483d6bd6f9c1d2d3cdeca6b3588e5dc245b2b42b2ff76c5253047
MD5 3f859a64f3e4d5360f4bfd62c6422f0d
SHA1 e7e0155e76be5e37ce4a97a66d7b6a9a74ea2cd8
SHA512 5e8d69b10ec522b023894bce2fb904b37173ebf6a4dfcb6cc33451917a02291b0bf7adabfa903651e37c865823aa6ce345667889f6edb18023a27851b4d349e7
SSDEEP 6144:83rrFSE3+RxrLh1h3AAzFG+UjnoDAJiJ/xS6L:woE3+RxZ1hQA5GPnIAJC/w
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f859a64f3e4d5360f4bfd62c6422f0d

File Explorer

3f859a64f3e4d5360f4bfd62c6422f0d

.exe 265KB

3f859a64f3e4d5360f4bfd62c6422f0d

IMPHASH 193b8a18b82d2d8f5b36c7239901d2c7
SHA256 4e5c4004aec483d6bd6f9c1d2d3cdeca6b3588e5dc245b2b42b2ff76c5253047
MD5 3f859a64f3e4d5360f4bfd62c6422f0d
SHA1 e7e0155e76be5e37ce4a97a66d7b6a9a74ea2cd8
SHA512 5e8d69b10ec522b023894bce2fb904b37173ebf6a4dfcb6cc33451917a02291b0bf7adabfa903651e37c865823aa6ce345667889f6edb18023a27851b4d349e7
SSDEEP 6144:83rrFSE3+RxrLh1h3AAzFG+UjnoDAJiJ/xS6L:woE3+RxZ1hQA5GPnIAJC/w
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW GetNativeSystemInfo lstrlenA CopyFileExW GetStringTypeA InterlockedIncrement ReadConsoleA InterlockedDecrement GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetPrivateProfileStringW WriteFile SetCommState GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GlobalFlags GetExitCodeProcess IsDBCSLeadByte ReadFile SetThreadPriority GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW GetStartupInfoA SetThreadLocale GetLastError GetProcAddress CopyFileA GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA GetFileType SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA Process32NextW CreateIoCompletionPort QueryMemoryResourceNotification EnumResourceNamesA GetCPInfoExA TlsAlloc ReadConsoleOutputCharacterW GetSystemTime DeleteFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA GetModuleHandleA

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

3f859a64f3e4d5360f4bfd62c6422f0d

kernel32

user32

msimg32

generic