44f63624dee00e80cea20f9b9b00603b

Sharing

Copy URL Twitter E-mail

General

Target
44f63624dee00e80cea20f9b9b00603b
Size 192KB
Sample240106-b5ad7secgq
SHA256 40cab9af96dd8b4410963274e7afec584d0b6c503d24bfc22b0e78543e1a1633
MD5 44f63624dee00e80cea20f9b9b00603b
SHA1 8092ed40a992d84ddf017b663931096562d19306
SHA512 0b1a138fd46654572d19b6b61bd87e5bdbe8b3c28529e4ca48e7152d5ab68a70e6e9a34f3e041d3adcc1a4ed8b0fd8adb1f80b867d6855c82a234ff09fa61802
SSDEEP 768:uSq8mNMWTY0EFUjsT2uJFBFCZGHjNTiJSG51Q1oJZa5RnOKjg+JFx4U7dqdWQjoC:uSMNMWdEFuNWFrfySG51Q1bjvJs3PF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44f63624dee00e80cea20f9b9b00603b

File Explorer

44f63624dee00e80cea20f9b9b00603b

.exe 192KB

44f63624dee00e80cea20f9b9b00603b

IMPHASH 81a91b1eaeeb2d4e4bc296e74f3479b7
SHA256 40cab9af96dd8b4410963274e7afec584d0b6c503d24bfc22b0e78543e1a1633
MD5 44f63624dee00e80cea20f9b9b00603b
SHA1 8092ed40a992d84ddf017b663931096562d19306
SHA512 0b1a138fd46654572d19b6b61bd87e5bdbe8b3c28529e4ca48e7152d5ab68a70e6e9a34f3e041d3adcc1a4ed8b0fd8adb1f80b867d6855c82a234ff09fa61802
SSDEEP 768:uSq8mNMWTY0EFUjsT2uJFBFCZGHjNTiJSG51Q1oJZa5RnOKjg+JFx4U7dqdWQjoC:uSMNMWdEFuNWFrfySG51Q1bjvJs3PF
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap GetExitCodeProcess Sleep GetModuleFileNameW CreateProcessW GetModuleHandleW CopyFileW GetTickCount MoveFileW HeapAlloc t$�) o _ 1 CreateThread CloseHandle TerminateThread GetLastError WaitForSingleObject CreateFileW WriteFile GetCurrentProcess HeapFree GetStdHandle SetConsoleTextAttribute GetVersionExW CreateDirectoryW 1

user32

wsprintfW SendInput ReleaseDC GetSystemMetrics FindWindowW SendMessageW GetDC

gdi32

CreateCompatibleBitmap SelectObject CreateCompatibleDC DeleteObject BitBlt

advapi32

RegOpenKeyExW RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegCloseKey

shlwapi

PathFileExistsW PathRemoveFileSpecW PathFindFileNameW

8

Gd& 0 V I GdipDisposeImage GdipGetImageEncodersSize GdipSaveImageToFile

p

2 C

v

P V 0

C a 3 a 5 # A # 0 7 P Ɨñ 8 5 c 2 ��TN��eƗñ \ - t c

ñ

l ��) O 0 c

5

- 8

a

#

8 o

Sharing

General

Malware Config

Signatures

File Explorer

44f63624dee00e80cea20f9b9b00603b

kernel32

user32

gdi32

advapi32

shlwapi

8

p

v

ñ

5

a

#

generic