590c80702966f4024d6085f8927df3a3

General

Target
590c80702966f4024d6085f8927df3a3
Size 315KB
Sample240113-sq683acdb7
SHA256 6f1507120710fd267c7d2b6aa1d63cec192e4eb904675f260a8e2e18ebfc4b99
MD5 590c80702966f4024d6085f8927df3a3
SHA1 c27114c70834520c1e020b2de504ef7ec1fc91e2
SHA512 7b898e0712be30b9c78f133191c21b5120aeb57afc729fc6dc5bb8c5ac5043d211ae78ce0337da0877c8b2c7165f3d7618b055f89d9dc5c7fe60efdac638f04a
SSDEEP 6144:1B/uJCdB0FBVDiOm6jp/Pm/+mlehH2BJ+eB5uD06ihdREos1ujEVa4t0hei:1luJLH8Om2PU+MYsrbuDJi1Eos1eE4jr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
590c80702966f4024d6085f8927df3a3

File Explorer

590c80702966f4024d6085f8927df3a3

.exe 315KB

590c80702966f4024d6085f8927df3a3

IMPHASH 47132e7294d9df76f8ee6d6805dd5e2d
SHA256 6f1507120710fd267c7d2b6aa1d63cec192e4eb904675f260a8e2e18ebfc4b99
MD5 590c80702966f4024d6085f8927df3a3
SHA1 c27114c70834520c1e020b2de504ef7ec1fc91e2
SHA512 7b898e0712be30b9c78f133191c21b5120aeb57afc729fc6dc5bb8c5ac5043d211ae78ce0337da0877c8b2c7165f3d7618b055f89d9dc5c7fe60efdac638f04a
SSDEEP 6144:1B/uJCdB0FBVDiOm6jp/Pm/+mlehH2BJ+eB5uD06ihdREos1ujEVa4t0hei:1luJLH8Om2PU+MYsrbuDJi1Eos1eE4jr
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DecodePointer WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW GetConsoleOutputCP VirtualProtect UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW RaiseException

user32

LoadIconW LoadCursorW EndPaint BeginPaint GetDC UpdateWindow GrayStringA TranslateAcceleratorW LoadAcceleratorsW EndDialog DialogBoxParamW ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage GetMessageW LoadStringW

gdi32

CreateSolidBrush

Sharing

General

Malware Config

Signatures

File Explorer

590c80702966f4024d6085f8927df3a3

kernel32

user32

gdi32

generic