92c99822505d3a4fc8c0f8adbd70183594a6d9344106b41cef05aeb5d41d8bc4

General

Target
92c99822505d3a4fc8c0f8adbd70183594a6d9344106b41cef05aeb5d41d8bc4
Size 1.3MB
Sample240108-bevbpaaef6
SHA256 92c99822505d3a4fc8c0f8adbd70183594a6d9344106b41cef05aeb5d41d8bc4
MD5 798750eeddcc9120147d70d0f5756df7
SHA1 78e7d0e5ce8470c1126269ae0ec162df5a971e9b
SHA512 5d64fc4a864d0ea7cb45da9165a3541188b326a4f43aa5a1060f92051b5881fb689833e116a1ac2e1b1b03b02207f82fccd7356d995e1e044e52fb69165ff103
SSDEEP 24576:htiBBB5LG83QtkKU+UJO91I/S/usPO/5I:hYBB5LG83QtHHI/QW/e
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92c99822505d3a4fc8c0f8adbd70183594a6d9344106b41cef05aeb5d41d8bc4

File Explorer

92c99822505d3a4fc8c0f8adbd70183594a6d9344106b41cef05aeb5d41d8bc4

.exe 1.3MB

92c99822505d3a4fc8c0f8adbd70183594a6d9344106b41cef05aeb5d41d8bc4

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 92c99822505d3a4fc8c0f8adbd70183594a6d9344106b41cef05aeb5d41d8bc4
MD5 798750eeddcc9120147d70d0f5756df7
SHA1 78e7d0e5ce8470c1126269ae0ec162df5a971e9b
SHA512 5d64fc4a864d0ea7cb45da9165a3541188b326a4f43aa5a1060f92051b5881fb689833e116a1ac2e1b1b03b02207f82fccd7356d995e1e044e52fb69165ff103
SSDEEP 24576:htiBBB5LG83QtkKU+UJO91I/S/usPO/5I:hYBB5LG83QtHHI/QW/e
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

92c99822505d3a4fc8c0f8adbd70183594a6d9344106b41cef05aeb5d41d8bc4

advapi32

kernel32

shell32

user32

shlwapi

generic