3334129bc2d087732c37d674a32c94c7aad0c688b700e6acb1f439f374827c34

General

Target
3334129bc2d087732c37d674a32c94c7aad0c688b700e6acb1f439f374827c34
Size 213KB
Sample240107-178r8afcgn
SHA256 3334129bc2d087732c37d674a32c94c7aad0c688b700e6acb1f439f374827c34
MD5 bebd91ddd9995ca465c0d8d9eb73f584
SHA1 ae3695b0557a3c72fc5e54937d110b190208df31
SHA512 06d9fa2533d493e3ab1e10ed651821e83f11f82e0aaf011a66794acb8f8d161c57a45b04fd7e56014b2f2bb83a5dff7ba31d1735d2713855d960d5c924b207a1
SSDEEP 3072:4fULIw/tgljb1faDKI1MivfhyDslfkNxZIMxdU:4fULntgBniwDS0OM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3334129bc2d087732c37d674a32c94c7aad0c688b700e6acb1f439f374827c34

File Explorer

3334129bc2d087732c37d674a32c94c7aad0c688b700e6acb1f439f374827c34

.exe 213KB

3334129bc2d087732c37d674a32c94c7aad0c688b700e6acb1f439f374827c34

IMPHASH 39416dc2f5874b8e4c313ecac4cc6b7a
SHA256 3334129bc2d087732c37d674a32c94c7aad0c688b700e6acb1f439f374827c34
MD5 bebd91ddd9995ca465c0d8d9eb73f584
SHA1 ae3695b0557a3c72fc5e54937d110b190208df31
SHA512 06d9fa2533d493e3ab1e10ed651821e83f11f82e0aaf011a66794acb8f8d161c57a45b04fd7e56014b2f2bb83a5dff7ba31d1735d2713855d960d5c924b207a1
SSDEEP 3072:4fULIw/tgljb1faDKI1MivfhyDslfkNxZIMxdU:4fULntgBniwDS0OM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7265

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalSize CreateJobObjectW CreateHardLinkA GetTickCount GetCommConfig GlobalFindAtomA LoadLibraryW SetConsoleMode EnumResourceLanguagesA SetComputerNameExW FlushInstructionCache InterlockedExchange GetLastError SetLastError BackupRead GetProcAddress VirtualAlloc SetComputerNameA SetFileAttributesA GetConsoleAliasA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW TransmitCommChar RemoveDirectoryW QueryDosDeviceW AddAtomA SetSystemTime GetThreadPriority GetModuleHandleA GetStringTypeW GetCurrentProcessId ResetWriteWatch DeleteFileA lstrcpyA GetConsoleAliasesLengthW FindFirstChangeNotificationW WriteConsoleOutputCharacterW WriteConsoleA GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA HeapSize RaiseException

user32

CharLowerBuffW

gdi32

GetCharABCWidthsFloatA SetColorAdjustment

advapi32

AreAnyAccessesGranted

Sharing

General

Malware Config

Signatures

File Explorer

3334129bc2d087732c37d674a32c94c7aad0c688b700e6acb1f439f374827c34

kernel32

user32

gdi32

advapi32

generic