4ab91cb416cbfa0261285d1d28cb8119

General

Target
4ab91cb416cbfa0261285d1d28cb8119
Size 660KB
Sample240108-hj2d5achen
SHA256 7d20b3a8943388a471f9324fb20a3900bf29af10ac20ef840ca1a030e53c0cd3
MD5 4ab91cb416cbfa0261285d1d28cb8119
SHA1 a8b0698e4b59dba68ee64693fc3d3298b8bf15ed
SHA512 b9366de6f14a8fb5d4c3b6f33a63a1dce0f8c7d5c2c31a878c43d387b54c7ee3dff870aa682eabde459048458020c30cf704bb0e8fe403dbf62e87bbaa67b4ec
SSDEEP 12288:3QR7aD03cZUTXJJsasa+ybn/1FIzCAcqo6vhJduLe:3QzrT5J7X1Fubo6D
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ab91cb416cbfa0261285d1d28cb8119

File Explorer

4ab91cb416cbfa0261285d1d28cb8119

.exe 660KB

4ab91cb416cbfa0261285d1d28cb8119

IMPHASH d2c278e11acb1e17db95739ca9dcf6f7
SHA256 7d20b3a8943388a471f9324fb20a3900bf29af10ac20ef840ca1a030e53c0cd3
MD5 4ab91cb416cbfa0261285d1d28cb8119
SHA1 a8b0698e4b59dba68ee64693fc3d3298b8bf15ed
SHA512 b9366de6f14a8fb5d4c3b6f33a63a1dce0f8c7d5c2c31a878c43d387b54c7ee3dff870aa682eabde459048458020c30cf704bb0e8fe403dbf62e87bbaa67b4ec
SSDEEP 12288:3QR7aD03cZUTXJJsasa+ybn/1FIzCAcqo6vhJduLe:3QzrT5J7X1Fubo6D
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetPriorityClass GetNativeSystemInfo WriteConsoleInputW SetFilePointer CopyFileExW SetLocalTime InterlockedIncrement InterlockedDecrement WaitNamedPipeA CreateDirectoryW SetComputerNameW GetComputerNameW FreeEnvironmentStringsA CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW FindResourceExA GlobalAlloc LoadLibraryW GetThreadSelectorEntry GetConsoleAliasExesLengthW InitAtomTable CreateSemaphoreA SetConsoleCursorPosition GetFileAttributesW GetBinaryTypeA GetSystemDirectoryA GetOverlappedResult CompareStringW EnumResourceNamesW GlobalUnlock ReleaseActCtx GetFileSizeEx GetStartupInfoA OpenMutexW GetHandleInformation GetProcAddress GetProcessHeaps ReadFileEx DisableThreadLibraryCalls ResetEvent LoadLibraryA GetConsoleScreenBufferInfo SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA WriteProfileStringA CreateIoCompletionPort GetCurrentDirectoryA FatalAppExitA GetCurrentThreadId GetCPInfoExA GetVersionExA TlsAlloc FindAtomW DeleteFileW UnregisterWaitEx LCMapStringW AreFileApisANSI lstrlenW FileTimeToDosDateTime FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue TlsFree SetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte LCMapStringA GetModuleHandleA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

gdi32

GetCharWidthA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

4ab91cb416cbfa0261285d1d28cb8119

kernel32

gdi32

winhttp

generic