667855dd1aed39886e5fd8109f2fd9e5

General

Target
667855dd1aed39886e5fd8109f2fd9e5
Size 1.1MB
Sample240119-a65fasbfej
SHA256 9c5648d95372a7b7fd70bab86725db07dab9e0e66826f9a06a7deb7b134902ef
MD5 667855dd1aed39886e5fd8109f2fd9e5
SHA1 2a563d2f412bfe6678031817f3cd6e37f59f935a
SHA512 547112dad6ab9734d272a4469391ed26e72f3cdba7bb61f1c6c6277a114c60b5071d7b9be7135134227adf5fd72add64f26c2ac6272f555f42d0b0207373f5ce
SSDEEP 24576:7pIsdzARA+zy7Bw73WARIaTWTSFjdLYmhyNiN/Dq4ZAOchk7ATYL:nd03zy03PBTWOFjdLBWOkhAATYL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
667855dd1aed39886e5fd8109f2fd9e5

File Explorer

667855dd1aed39886e5fd8109f2fd9e5

.exe 1.1MB

667855dd1aed39886e5fd8109f2fd9e5

IMPHASH 7d2c4701a9e00af48c63738cadcb0b55
SHA256 9c5648d95372a7b7fd70bab86725db07dab9e0e66826f9a06a7deb7b134902ef
MD5 667855dd1aed39886e5fd8109f2fd9e5
SHA1 2a563d2f412bfe6678031817f3cd6e37f59f935a
SHA512 547112dad6ab9734d272a4469391ed26e72f3cdba7bb61f1c6c6277a114c60b5071d7b9be7135134227adf5fd72add64f26c2ac6272f555f42d0b0207373f5ce
SSDEEP 24576:7pIsdzARA+zy7Bw73WARIaTWTSFjdLYmhyNiN/Dq4ZAOchk7ATYL:nd03zy03PBTWOFjdLBWOkhAATYL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

31619

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetProcessAffinityMask CreateFileA WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW EndUpdateResourceW ReadConsoleA GetCurrentProcess GetUserDefaultLCID WaitForSingleObject WriteConsoleInputA SetEvent GetSystemDefaultLCID GetModuleHandleW VirtualFree SetFileTime GetGeoInfoW ReadConsoleOutputA WriteFile CreateActCtxW InitializeCriticalSection ActivateActCtx GetConsoleCP GlobalFindAtomA LoadLibraryW TerminateThread ReadConsoleInputA CopyFileW GetSystemWindowsDirectoryA GetVersionExW InterlockedPopEntrySList DnsHostnameToComputerNameW GetConsoleAliasW SetConsoleCursorPosition VerifyVersionInfoA CreateActCtxA SetConsoleTitleA GetConsoleOutputCP VerifyVersionInfoW SetLastError GetProcAddress VerLanguageNameA HeapUnlock GetConsoleDisplayMode EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue CreateTapePartition BuildCommDCBAndTimeoutsW UpdateResourceW BuildCommDCBA VirtualProtect GetFileAttributesExW GetCPInfoExA FindFirstVolumeA GetPrivateProfileSectionW GetSystemTime AreFileApisANSI CreateThread CloseHandle InterlockedIncrement InterlockedDecrement Sleep DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo ExitProcess GetStdHandle GetModuleFileNameA HeapCreate VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleW

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

667855dd1aed39886e5fd8109f2fd9e5

kernel32

user32

generic