73c1f532fb36af32c4bf0396e36a046c

General

Target
73c1f532fb36af32c4bf0396e36a046c
Size 787KB
Sample240125-e92k2agda6
SHA256 219371ac3b82f569f98a692a680f54aad32a7932e7f94da9d51c6a2738d59c94
MD5 73c1f532fb36af32c4bf0396e36a046c
SHA1 50d79516412f9f40ce0c65fef0bacc99ed16361f
SHA512 96d97622ae4ab607423fb7c0e9e2ed8a6f39ac4b5933cbde84d91b6a235fc291d8ff0fcf67d4a2dc1d38203432b32a226baf63832ab38c6a9ad02f53be033979
SSDEEP 12288:hksmHsAz1XoTtgdGigT84EbBfo2YRJ2zVGGDMgjT7BX9aokgDHkwB7yBPAi:hk9MtgdGieEbfi4JGQUokgDEwIBPA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73c1f532fb36af32c4bf0396e36a046c

File Explorer

73c1f532fb36af32c4bf0396e36a046c

.exe 787KB

73c1f532fb36af32c4bf0396e36a046c

IMPHASH a06df199bc5c29ff1f7c13754059d5f1
SHA256 219371ac3b82f569f98a692a680f54aad32a7932e7f94da9d51c6a2738d59c94
MD5 73c1f532fb36af32c4bf0396e36a046c
SHA1 50d79516412f9f40ce0c65fef0bacc99ed16361f
SHA512 96d97622ae4ab607423fb7c0e9e2ed8a6f39ac4b5933cbde84d91b6a235fc291d8ff0fcf67d4a2dc1d38203432b32a226baf63832ab38c6a9ad02f53be033979
SSDEEP 12288:hksmHsAz1XoTtgdGigT84EbBfo2YRJ2zVGGDMgjT7BX9aokgDHkwB7yBPAi:hk9MtgdGieEbfi4JGQUokgDEwIBPA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

619815

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasW InterlockedPopEntrySList GetConsoleDisplayMode CreateConsoleScreenBuffer GetConsoleCP VerifyVersionInfoA WriteConsoleA SetLastError CreateFileW WritePrivateProfileSectionA GetPrivateProfileSectionW EnumDateFormatsExA GetCurrentProcessId LoadLibraryA IsDebuggerPresent SetConsoleCP FindFirstVolumeW WriteFile BuildCommDCBW VerLanguageNameA AreFileApisANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfo GetLastError UpdateResourceA SetConsoleTitleW SetFilePointer LoadLibraryExA CopyFileW ReadConsoleA ActivateActCtx AddRefActCtx HeapLock CreateActCtxW ReadConsoleOutputA GetProcessHeaps GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA HeapAlloc UnmapViewOfFile GetAtomNameA HeapSize GetGeoInfoW GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW SetProcessAffinityMask WaitForSingleObject SetSystemPowerState VerifyVersionInfoW WriteConsoleOutputCharacterW SetTimeZoneInformation GetMailslotInfo GetCPInfoExA SetEnvironmentVariableA GetFileAttributesExA GetComputerNameW CommConfigDialogW GetConsoleAliasA GetConsoleWindow GetSystemTimeAsFileTime GetDiskFreeSpaceA CreateFileA GetConsoleAliasesLengthA DnsHostnameToComputerNameA EnterCriticalSection InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapFree TerminateProcess GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle LCMapStringA LCMapStringW GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW

user32

RealChildWindowFromPoint GetAltTabInfoA

advapi32

AdjustTokenGroups BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

73c1f532fb36af32c4bf0396e36a046c

kernel32

user32

advapi32

generic