aa0d51394f696edbe195cb4e279f135f85a5acad6eed5d2cb542c06816cf2293

General

Target
aa0d51394f696edbe195cb4e279f135f85a5acad6eed5d2cb542c06816cf2293
Size 733KB
Sample240114-2bfbgaddbq
SHA256 aa0d51394f696edbe195cb4e279f135f85a5acad6eed5d2cb542c06816cf2293
MD5 95a407562c1f5ff8d8c1de430349eb99
SHA1 638407b2f67ac47b69c5fa03b55144563e1c440d
SHA512 d457d3275a4f0ee66a984b203e9fa5a1403e8f9ecbfd5e9cde11bab1e486fc0cb554cd05c6c892bf9ae59b7aada67eafca6a6deb39dd2051310fe757f28949e5
SSDEEP 12288:UfLtmBByRWA5neQMR9wcJBzSco6zPIB8+5vTxAGuIQHBupiSoL9zX4w4GSYf:EtmBEwAw3zrBzSOzY5tNuJupiSoLZvv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa0d51394f696edbe195cb4e279f135f85a5acad6eed5d2cb542c06816cf2293

File Explorer

aa0d51394f696edbe195cb4e279f135f85a5acad6eed5d2cb542c06816cf2293

.exe 733KB

aa0d51394f696edbe195cb4e279f135f85a5acad6eed5d2cb542c06816cf2293

IMPHASH 6622222a6fbc2c3f83cd5cfc7415ce83
SHA256 aa0d51394f696edbe195cb4e279f135f85a5acad6eed5d2cb542c06816cf2293
MD5 95a407562c1f5ff8d8c1de430349eb99
SHA1 638407b2f67ac47b69c5fa03b55144563e1c440d
SHA512 d457d3275a4f0ee66a984b203e9fa5a1403e8f9ecbfd5e9cde11bab1e486fc0cb554cd05c6c892bf9ae59b7aada67eafca6a6deb39dd2051310fe757f28949e5
SSDEEP 12288:UfLtmBByRWA5neQMR9wcJBzSco6zPIB8+5vTxAGuIQHBupiSoL9zX4w4GSYf:EtmBEwAw3zrBzSOzY5tNuJupiSoLZvv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10397

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement FreeEnvironmentStringsA GetModuleHandleW GetTickCount VirtualFree LoadLibraryW GetTimeFormatW GetAtomNameW GetModuleFileNameW CompareStringW IsBadStringPtrA SetConsoleTitleA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress GetConsoleAliasExesLengthA GetTapeStatus GetProcessHeaps HeapSize LoadLibraryA LocalAlloc WritePrivateProfileStringA SetConsoleOutputCP lstrcatW FreeEnvironmentStringsW SetCalendarInfoA LocalFree CompareStringA GetTimeZoneInformation GetLocaleInfoW LCMapStringW GetStringTypeW TlsGetValue GetLocaleInfoA GetLongPathNameA GetEnvironmentVariableW GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetCurrentThread Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar SetEnvironmentVariableA

user32

GetForegroundWindow GetKeyboardType LookupIconIdFromDirectory GetMonitorInfoA

gdi32

GetBoundsRect

advapi32

EnumDependentServicesW

Sharing

General

Malware Config

Signatures

File Explorer

aa0d51394f696edbe195cb4e279f135f85a5acad6eed5d2cb542c06816cf2293

kernel32

user32

gdi32

advapi32

generic