d248ac0df52d36cca68053a1a361f864e8b9b83994475df0ae5f35ee1f7c5feb

General

Target
d248ac0df52d36cca68053a1a361f864e8b9b83994475df0ae5f35ee1f7c5feb
Size 253KB
Sample240108-fnmenabefq
SHA256 d248ac0df52d36cca68053a1a361f864e8b9b83994475df0ae5f35ee1f7c5feb
MD5 e8ef7a38069b6dd41d3aaa5f56a12ed3
SHA1 5adfdfb6cce9e7e567a9708d9cf7eb03dbaee2c5
SHA512 d811410d383c893fb6139f4e02dbeaf2c5538eaceed4b5bbc2a8745a43ee9ed5b1582ba2f4381e9412ebf09d6373a2862386d09b536dc09816418c313466fd37
SSDEEP 3072:Se2JURFLNtsfZehN+ZEmJiiet+xTHs+mjKbqHZTrdgGD6pMGKgD9RUacmwgvXF/O:SPiLNE2N6JGKA9dgGDvfacmwgdDwwa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d248ac0df52d36cca68053a1a361f864e8b9b83994475df0ae5f35ee1f7c5feb

File Explorer

d248ac0df52d36cca68053a1a361f864e8b9b83994475df0ae5f35ee1f7c5feb

.exe 253KB

d248ac0df52d36cca68053a1a361f864e8b9b83994475df0ae5f35ee1f7c5feb

IMPHASH b9ae1e23b621bc8c7d5039adbfb5ff25
SHA256 d248ac0df52d36cca68053a1a361f864e8b9b83994475df0ae5f35ee1f7c5feb
MD5 e8ef7a38069b6dd41d3aaa5f56a12ed3
SHA1 5adfdfb6cce9e7e567a9708d9cf7eb03dbaee2c5
SHA512 d811410d383c893fb6139f4e02dbeaf2c5538eaceed4b5bbc2a8745a43ee9ed5b1582ba2f4381e9412ebf09d6373a2862386d09b536dc09816418c313466fd37
SSDEEP 3072:Se2JURFLNtsfZehN+ZEmJiiet+xTHs+mjKbqHZTrdgGD6pMGKgD9RUacmwgvXF/O:SPiLNE2N6JGKA9dgGDvfacmwgdDwwa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalUnlock OpenFile TryEnterCriticalSection GetConsoleAliasesLengthW CopyFileExW SetEndOfFile FreeLibrary CreateJobObjectW HeapFree GetTimeFormatA FreeEnvironmentStringsA CreateNamedPipeW GetWindowsDirectoryA GetConsoleCP GlobalAlloc IsProcessInJob WriteConsoleOutputA LeaveCriticalSection GetAtomNameW GetCompressedFileSizeA GetTimeZoneInformation CompareStringW VirtualUnlock GetLastError GetLongPathNameW HeapSize EnumDateFormatsExA SetVolumeLabelW GetConsoleDisplayMode BuildCommDCBW OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW DnsHostnameToComputerNameA GlobalFindAtomW GetModuleFileNameA SetConsoleTitleW GetModuleHandleA lstrcatW VirtualProtect QueryPerformanceFrequency DeleteAtom LocalFree SetFileAttributesW LCMapStringW CompareStringA GetLocaleInfoW WideCharToMultiByte TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread DeleteCriticalSection FatalAppExitA EnterCriticalSection HeapCreate HeapDestroy VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetConsoleCtrlHandler InterlockedExchange GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA SetEnvironmentVariableA

user32

GetDesktopWindow GetMonitorInfoA

Name

.text

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

417B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lowutiy

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mik

Size

1024B

Virtual Size

577B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d248ac0df52d36cca68053a1a361f864e8b9b83994475df0ae5f35ee1f7c5feb

kernel32

user32

generic