64b4db1046496c57a0779befc72c264d

General

Target
64b4db1046496c57a0779befc72c264d
Size 448KB
Sample240118-g77elsehd7
SHA256 d5e0eecc3da1a2bc3f36df0a05c0ce116def64c9e6c72224c8988a671ed7fe8a
MD5 64b4db1046496c57a0779befc72c264d
SHA1 71cfbee47a5b6f0bb18bba914b5896b3037cfeab
SHA512 d59bf100032299d10e6737d9489202545ce4cf3b403407da0ba0fbbd0f72b502478ce3557008ad785e146041a100e2e48ba1d9414a983d954cea7437c424f3da
SSDEEP 12288:4NO4tKQaWEkJsUy2H5ZhLvWmyN/En9C5:MtKQaTkJs0LemI49
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64b4db1046496c57a0779befc72c264d

File Explorer

64b4db1046496c57a0779befc72c264d

.exe 448KB

64b4db1046496c57a0779befc72c264d

IMPHASH e4703f951d731209d4eda0f101cdb509
SHA256 d5e0eecc3da1a2bc3f36df0a05c0ce116def64c9e6c72224c8988a671ed7fe8a
MD5 64b4db1046496c57a0779befc72c264d
SHA1 71cfbee47a5b6f0bb18bba914b5896b3037cfeab
SHA512 d59bf100032299d10e6737d9489202545ce4cf3b403407da0ba0fbbd0f72b502478ce3557008ad785e146041a100e2e48ba1d9414a983d954cea7437c424f3da
SSDEEP 12288:4NO4tKQaWEkJsUy2H5ZhLvWmyN/En9C5:MtKQaTkJs0LemI49
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA FindResourceExW LocalCompact UpdateResourceA MoveFileExW InterlockedDecrement GetCurrentProcess GetUserDefaultLCID SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW SetEvent GetSystemDefaultLCID GetProcessHeap IsBadReadPtr GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW ReadConsoleOutputA WriteFile CreateActCtxW GetVolumePathNameW ActivateActCtx GetConsoleCP GlobalAlloc TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA SetConsoleCP InterlockedPopEntrySList GetFileAttributesA DnsHostnameToComputerNameW lstrcpynW GetConsoleAliasW SetTimeZoneInformation WriteConsoleOutputCharacterW WriteConsoleW GetMailslotInfo CreateActCtxA GetCPInfoExW GetLastError GetLongPathNameW SetLastError GetProcAddress EnumDateFormatsExA EnterCriticalSection GlobalGetAtomNameA BuildCommDCBW LoadLibraryA GetProfileStringA GlobalGetAtomNameW WaitForMultipleObjects SetSystemTime SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA lstrcatW EraseTape CancelTimerQueueTimer GetPrivateProfileSectionA VirtualProtect PeekConsoleInputA SetCalendarInfoA EndUpdateResourceA FindFirstVolumeW AreFileApisANSI VerifyVersionInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

GetAltTabInfoW RealGetWindowClassA

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

64b4db1046496c57a0779befc72c264d

kernel32

user32

advapi32

generic