2976b9cc47bd3854337e3653128eec2ac18da76a93941b5cc0becd0ba4926470

General

Target
2976b9cc47bd3854337e3653128eec2ac18da76a93941b5cc0becd0ba4926470
Size 845KB
Sample240114-18d91adcgn
SHA256 2976b9cc47bd3854337e3653128eec2ac18da76a93941b5cc0becd0ba4926470
MD5 b8b236e9fab508d1ed85fc4ad0843ef5
SHA1 4366140de33fd27603f8aeb5f26d395e5d9a51c8
SHA512 fdb986be769977940c551d0d331c903879761802555fd8df9b82cc9740e28d8bbced1955bd786bee268e2bb4b3734e4ac415b29bcbf5da806b5095beb85c0f74
SSDEEP 12288:slu4ya2xb/wGoF2YgLiGVC6q4ddtrRjmg8WW8GyeK7rX4IreBEM1/hjxq9:l464ZFHTGg6FxrFx8PyeK7rX86Aa9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2976b9cc47bd3854337e3653128eec2ac18da76a93941b5cc0becd0ba4926470

File Explorer

2976b9cc47bd3854337e3653128eec2ac18da76a93941b5cc0becd0ba4926470

.exe 845KB

2976b9cc47bd3854337e3653128eec2ac18da76a93941b5cc0becd0ba4926470

IMPHASH 31e36cf00bd38f6118c77fe30a6b7e3e
SHA256 2976b9cc47bd3854337e3653128eec2ac18da76a93941b5cc0becd0ba4926470
MD5 b8b236e9fab508d1ed85fc4ad0843ef5
SHA1 4366140de33fd27603f8aeb5f26d395e5d9a51c8
SHA512 fdb986be769977940c551d0d331c903879761802555fd8df9b82cc9740e28d8bbced1955bd786bee268e2bb4b3734e4ac415b29bcbf5da806b5095beb85c0f74
SSDEEP 12288:slu4ya2xb/wGoF2YgLiGVC6q4ddtrRjmg8WW8GyeK7rX4IreBEM1/hjxq9:l464ZFHTGg6FxrFx8PyeK7rX86Aa9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8520

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA WriteConsoleOutputCharacterA InterlockedIncrement InterlockedDecrement InterlockedCompareExchange CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GlobalFindAtomA GetWriteWatch WriteConsoleW GetConsoleFontSize SetComputerNameExW GetStartupInfoA SetThreadContext SetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA LocalAlloc DeleteTimerQueue AddAtomW QueryDosDeviceW lstrcmpiW FindFirstChangeNotificationA PurgeComm DeleteFileW GetCurrentProcessId SuspendThread FindResourceA GetLastError GetComputerNameA Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte RtlUnwind GetModuleHandleA HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP SetStdHandle CreateFileA

gdi32

GetCharABCWidthsFloatA DeleteMetaFile

Sharing

General

Malware Config

Signatures

File Explorer

2976b9cc47bd3854337e3653128eec2ac18da76a93941b5cc0becd0ba4926470

kernel32

gdi32

generic