f96aed5c57b156cd1de03d894ed230275f2b41ac93b99b715a16a40bcc9e08fa

General

Target
f96aed5c57b156cd1de03d894ed230275f2b41ac93b99b715a16a40bcc9e08fa
Size 275KB
Sample240121-2f384abgd6
SHA256 f96aed5c57b156cd1de03d894ed230275f2b41ac93b99b715a16a40bcc9e08fa
MD5 1198dea7404388299256dfa02576c7ae
SHA1 cfdf92c53f56282c989f9b7f6216aff7abee1581
SHA512 30f91330908dc892d7df988efbac1a817c2a70bb9e974aa998dd2347150c6db740ed7499a44b52dd4139ecc2b278204ebb64ef3422e31fba3464ba54479eb481
SSDEEP 6144:qoAPSEL9Rdtl66LsJj0kQHl7M2aSeMB1pJd:qVSERntlbeVQF7M2J1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f96aed5c57b156cd1de03d894ed230275f2b41ac93b99b715a16a40bcc9e08fa

File Explorer

f96aed5c57b156cd1de03d894ed230275f2b41ac93b99b715a16a40bcc9e08fa

.exe 275KB

f96aed5c57b156cd1de03d894ed230275f2b41ac93b99b715a16a40bcc9e08fa

IMPHASH 77e6cc63bcbf0497caacc07dc27069b9
SHA256 f96aed5c57b156cd1de03d894ed230275f2b41ac93b99b715a16a40bcc9e08fa
MD5 1198dea7404388299256dfa02576c7ae
SHA1 cfdf92c53f56282c989f9b7f6216aff7abee1581
SHA512 30f91330908dc892d7df988efbac1a817c2a70bb9e974aa998dd2347150c6db740ed7499a44b52dd4139ecc2b278204ebb64ef3422e31fba3464ba54479eb481
SSDEEP 6144:qoAPSEL9Rdtl66LsJj0kQHl7M2aSeMB1pJd:qVSERntlbeVQF7M2J1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement QueryDosDeviceA InterlockedCompareExchange FindCloseChangeNotification GetComputerNameW CreateHardLinkA GetTickCount GlobalFindAtomA SetConsoleMode WriteConsoleW SetComputerNameExW GetStartupInfoA GetLastError SetLastError GetProcAddress FindResourceW SetComputerNameA LoadLibraryA InterlockedExchangeAdd LocalAlloc AddAtomW lstrcmpiW GetModuleHandleA PurgeComm CompareStringA DeleteFileW GetCurrentProcessId DebugBreak ResetWriteWatch ReadConsoleOutputCharacterW ResumeThread VirtualAlloc GetConsoleAliasesLengthW GetModuleHandleW Sleep ExitProcess GetStartupInfoW EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA WideCharToMultiByte HeapAlloc HeapReAlloc HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap ReadFile WriteConsoleA GetConsoleOutputCP

gdi32

GetCharABCWidthsFloatA

Sharing

General

Malware Config

Signatures

File Explorer

f96aed5c57b156cd1de03d894ed230275f2b41ac93b99b715a16a40bcc9e08fa

kernel32

gdi32

generic