4b9684e393bcb5fb779b00fd025100bca7582a89858ce9344926ff7e3206b90b

Sharing

Copy URL Twitter E-mail

General

Target
4b9684e393bcb5fb779b00fd025100bca7582a89858ce9344926ff7e3206b90b
Size 758KB
Sample240115-fgplfahfdm
SHA256 4b9684e393bcb5fb779b00fd025100bca7582a89858ce9344926ff7e3206b90b
MD5 6f83cf92ac13d4f982229e5907dd66d8
SHA1 2d97ea6768afa98cd1d8ba26435f69750b024729
SHA512 9c9e8cc5b718877934429917cf3a200900498462eda756a6567509b7e49635512b867228244a0a863f54130bf8218f67dc037fcaf6adcb1e28002d76368e6e32
SSDEEP 12288:sznNsQjKtYGHis7osbTktOGtFCgd8exs+B7Z0Gh4DD/Pj8HuUAjxgLVLxpjhBxPZ:AsQjKtY4xss2OgFCwtZZv4DD3j8HbAjU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b9684e393bcb5fb779b00fd025100bca7582a89858ce9344926ff7e3206b90b

File Explorer

4b9684e393bcb5fb779b00fd025100bca7582a89858ce9344926ff7e3206b90b

.exe 758KB

4b9684e393bcb5fb779b00fd025100bca7582a89858ce9344926ff7e3206b90b

IMPHASH 691a82025742b16964fc0a05536242f1
SHA256 4b9684e393bcb5fb779b00fd025100bca7582a89858ce9344926ff7e3206b90b
MD5 6f83cf92ac13d4f982229e5907dd66d8
SHA1 2d97ea6768afa98cd1d8ba26435f69750b024729
SHA512 9c9e8cc5b718877934429917cf3a200900498462eda756a6567509b7e49635512b867228244a0a863f54130bf8218f67dc037fcaf6adcb1e28002d76368e6e32
SSDEEP 12288:sznNsQjKtYGHis7osbTktOGtFCgd8exs+B7Z0Gh4DD/Pj8HuUAjxgLVLxpjhBxPZ:AsQjKtY4xss2OgFCwtZZv4DD3j8HbAjU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10399

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetTimeFormatA FreeEnvironmentStringsA GetModuleHandleW GetTickCount VirtualFree LoadLibraryW GetAtomNameW GetMailslotInfo LCMapStringA GetConsoleOutputCP GetConsoleAliasesW GetLastError GetProcAddress GetLongPathNameA GetTapeStatus GetConsoleAliasExesLengthA HeapSize LoadLibraryA LocalAlloc SetCalendarInfoW WritePrivateProfileStringA GetModuleFileNameA lstrcatW FreeEnvironmentStringsW CompareStringA LocalFree CompareStringW GetTimeZoneInformation GetLocaleInfoW LCMapStringW GetStringTypeW TlsGetValue GetLocaleInfoA GetProcessHeaps TryEnterCriticalSection MultiByteToWideChar GetStringTypeA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetCurrentThread Sleep ExitProcess WriteFile GetStdHandle GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetEnvironmentVariableA

user32

GetMonitorInfoA GetForegroundWindow GetKeyboardType LookupIconIdFromDirectory

gdi32

GetBoundsRect

advapi32

ObjectPrivilegeAuditAlarmA

ole32

CreateDataCache

Sharing

General

Malware Config

Signatures

File Explorer

4b9684e393bcb5fb779b00fd025100bca7582a89858ce9344926ff7e3206b90b

kernel32

user32

gdi32

advapi32

ole32

generic