4f9bea4318778b0d182120273b17c93065429fb56d474c288f0dc4c4e19f8b89

General

Target
4f9bea4318778b0d182120273b17c93065429fb56d474c288f0dc4c4e19f8b89
Size 1.3MB
Sample240108-ber7bsaef4
SHA256 4f9bea4318778b0d182120273b17c93065429fb56d474c288f0dc4c4e19f8b89
MD5 0f74fc4c1b874ad950e388c1e18ca600
SHA1 27f8024b0cc57bbc808a11d765b10fb2682b8dc6
SHA512 e432bf100e324f536956497e568279dc04dcfd92f8f37e4a5bcfcfafd1acf295d08f3ba0250ee1ef8f306f3b5e7cf30d24c494508a94a288bee7462d2ba0fbd6
SSDEEP 12288:199B+V82rQ9KbFwOKpOz5N9vWst3QVkBNhw6Y5o+SudAfh39z2Go:199B3EQkbvK8N3t3QVkLhoo+SVfhl2/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f9bea4318778b0d182120273b17c93065429fb56d474c288f0dc4c4e19f8b89

File Explorer

4f9bea4318778b0d182120273b17c93065429fb56d474c288f0dc4c4e19f8b89

.exe 1.3MB

4f9bea4318778b0d182120273b17c93065429fb56d474c288f0dc4c4e19f8b89

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 4f9bea4318778b0d182120273b17c93065429fb56d474c288f0dc4c4e19f8b89
MD5 0f74fc4c1b874ad950e388c1e18ca600
SHA1 27f8024b0cc57bbc808a11d765b10fb2682b8dc6
SHA512 e432bf100e324f536956497e568279dc04dcfd92f8f37e4a5bcfcfafd1acf295d08f3ba0250ee1ef8f306f3b5e7cf30d24c494508a94a288bee7462d2ba0fbd6
SSDEEP 12288:199B+V82rQ9KbFwOKpOz5N9vWst3QVkBNhw6Y5o+SudAfh39z2Go:199B3EQkbvK8N3t3QVkLhoo+SVfhl2/
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

4f9bea4318778b0d182120273b17c93065429fb56d474c288f0dc4c4e19f8b89

advapi32

kernel32

shell32

user32

shlwapi

generic