41c3b05debb26645393a5c7253f28e77

Sharing

Copy URL Twitter E-mail

General

Target
41c3b05debb26645393a5c7253f28e77
Size 594KB
Sample240104-yl6dvsaed4
SHA256 584a847c7e779a2951440152072b93e4ecccb1b86148a2e289c2ccb86962ac34
MD5 41c3b05debb26645393a5c7253f28e77
SHA1 e1e8fcfdc15c34f7e1ce974e4278e79879fe86ae
SHA512 c24771dee7d0e7651b2530623332c28b434da98cc3dbadf3af597225d71a9f2c699bd65f9155424ded2e3902ca1a2f63bc234345b10db9f06e724e9d90ec8351
SSDEEP 12288:SfX25LrCxNuYlc+zakllH7RaR00QHtHx6fsZAvantxK13v6pcL4cUikDXR6sVc+i:SfX25LrCxNuYlcSXt0ehkASIN3CTmv+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41c3b05debb26645393a5c7253f28e77

File Explorer

41c3b05debb26645393a5c7253f28e77

.exe 594KB

41c3b05debb26645393a5c7253f28e77

IMPHASH 31ca2ab0a9e3ab3d4b0118b3d0bba429
SHA256 584a847c7e779a2951440152072b93e4ecccb1b86148a2e289c2ccb86962ac34
MD5 41c3b05debb26645393a5c7253f28e77
SHA1 e1e8fcfdc15c34f7e1ce974e4278e79879fe86ae
SHA512 c24771dee7d0e7651b2530623332c28b434da98cc3dbadf3af597225d71a9f2c699bd65f9155424ded2e3902ca1a2f63bc234345b10db9f06e724e9d90ec8351
SSDEEP 12288:SfX25LrCxNuYlc+zakllH7RaR00QHtHx6fsZAvantxK13v6pcL4cUikDXR6sVc+i:SfX25LrCxNuYlcSXt0ehkASIN3CTmv+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30825

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

PlaySoundW

kernel32

GetProcessHeap GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FlushFileBuffers FindFirstFileExW FindClose MultiByteToWideChar GetFileSizeEx GetConsoleOutputCP SetFilePointerEx ReadConsoleW GetConsoleMode GetFileType CreateFileW HeapSize HeapReAlloc SetEndOfFile lstrcmpW LocalFree VirtualProtect GetCommandLineW WriteConsoleW FindNextFileW GetLastError LCMapStringW CompareStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind DecodePointer SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ReadFile GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW

user32

LoadCursorW GetSysColorBrush RegisterClassW DispatchMessageW TranslateMessage GetMessageW LoadImageW LoadImageA SetWindowLongW SetWindowTextW SetFocus ShowWindow IsWindow PostQuitMessage SendMessageW wsprintfW GetDC GrayStringA FillRect MapWindowPoints GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW RedrawWindow InvalidateRect DrawTextW GetSystemMetrics SetWindowPos CreateWindowExW DefWindowProcW

gdi32

SetBkColor GetStockObject CreateFontW CreateCompatibleDC GetObjectW SetTextColor SetBkMode SelectObject CreateSolidBrush BitBlt

shell32

CommandLineToArgvW SHGetFolderPathW

Sharing

General

Malware Config

Signatures

File Explorer

41c3b05debb26645393a5c7253f28e77

winmm

kernel32

user32

gdi32

shell32

generic