334991a258f95f04269191726bb6d995b338aedd29ee20d32edfc178ca665e83

General

Target
334991a258f95f04269191726bb6d995b338aedd29ee20d32edfc178ca665e83
Size 626KB
Sample240109-nld99sgdej
SHA256 334991a258f95f04269191726bb6d995b338aedd29ee20d32edfc178ca665e83
MD5 3441b53e27fb459fc80a12eacfc8b6bf
SHA1 7b65afd3e8497a7ef044600cb7a2c1af4ea523b6
SHA512 928cae0468159e51e9a4bdc40b643505f183d592f6a9605b6dd43dd86cdd038154348b356763b970aab110caf7dac29eb45e4eb5436c529e8367311df2d9bf2c
SSDEEP 12288:DSHLQx0/wnwMiGEFldgagsvtTTJmv26p4Bdf0nfH3dT:DSHLcLnwMoFlbgsJTYp4/0P3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
334991a258f95f04269191726bb6d995b338aedd29ee20d32edfc178ca665e83

File Explorer

334991a258f95f04269191726bb6d995b338aedd29ee20d32edfc178ca665e83

.exe 626KB

334991a258f95f04269191726bb6d995b338aedd29ee20d32edfc178ca665e83

IMPHASH 57ddda578ffb87d8255e479b8f0128d7
SHA256 334991a258f95f04269191726bb6d995b338aedd29ee20d32edfc178ca665e83
MD5 3441b53e27fb459fc80a12eacfc8b6bf
SHA1 7b65afd3e8497a7ef044600cb7a2c1af4ea523b6
SHA512 928cae0468159e51e9a4bdc40b643505f183d592f6a9605b6dd43dd86cdd038154348b356763b970aab110caf7dac29eb45e4eb5436c529e8367311df2d9bf2c
SSDEEP 12288:DSHLQx0/wnwMiGEFldgagsvtTTJmv26p4Bdf0nfH3dT:DSHLcLnwMoFlbgsJTYp4/0P3
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetStdHandle GetConsoleMode TlsGetValue GetLastError SetLastError RaiseException ExitProcess GetStartupInfoA GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer SetEndOfFile GetSystemInfo LoadLibraryW GetProcAddress FreeLibrary FormatMessageW CreateFileW GetFileAttributesW CreateDirectoryW GetCurrentDirectoryW GetFullPathNameW GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority GetCurrentThread OpenThread IsDebuggerPresent CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlUnwindEx EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource GetWindowsDirectoryA GetVersionExA CompareStringA GetLocaleInfoA GetDateFormatA EnumCalendarInfoA CreateProcessW FindNextFileW CompareStringW GetLocaleInfoW GetDateFormatW FindFirstFileExW TerminateProcess GetExitCodeProcess DeviceIoControl FindClose DuplicateHandle GetLocalTime FileTimeToLocalFileTime FileTimeToDosDateTime CreatePipe PeekNamedPipe GetCPInfo GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeTypeEx VariantClear VariantCopy VariantInit SafeArrayAccessData SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SafeArrayUnaccessData

user32

MessageBoxA CharUpperBuffW CharLowerBuffW CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetSystemMetrics MessageBeep

Name

.text

Size

395KB

Virtual Size

395KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

180KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

334991a258f95f04269191726bb6d995b338aedd29ee20d32edfc178ca665e83

kernel32

oleaut32

user32

generic