c958f694f25f48d033d0774dde60f0a5990ad2d8bd5f64a569428c6c71d0b56d

General

Target
c958f694f25f48d033d0774dde60f0a5990ad2d8bd5f64a569428c6c71d0b56d
Size 250KB
Sample240125-tefgmsbafp
SHA256 c958f694f25f48d033d0774dde60f0a5990ad2d8bd5f64a569428c6c71d0b56d
MD5 35391ece3b7a7b067d5f3778e72bcf4e
SHA1 7a3ad3ec63679f4d164edb0a4e70c5e37c2fa5ed
SHA512 a8bd058c267752635cce9b5865f99a2ececccc5fb9970f32dd92fb46de31866a0c13937192b244345ad2099a5a08a207bc17c65246fe0f8a968bb6184f486baa
SSDEEP 3072:TYVp+k+WzTgEhOCbe4vul5f6epCHu6HuUh51hvkLk8+ebUStoAVxyhUoc:TYVpx+TEhOoeCulTwHEE51hk9Ptojm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c958f694f25f48d033d0774dde60f0a5990ad2d8bd5f64a569428c6c71d0b56d

File Explorer

c958f694f25f48d033d0774dde60f0a5990ad2d8bd5f64a569428c6c71d0b56d

.dll 250KB

c958f694f25f48d033d0774dde60f0a5990ad2d8bd5f64a569428c6c71d0b56d

IMPHASH 09b6fe313e234e4a13abc7b24751666c
SHA256 c958f694f25f48d033d0774dde60f0a5990ad2d8bd5f64a569428c6c71d0b56d
MD5 35391ece3b7a7b067d5f3778e72bcf4e
SHA1 7a3ad3ec63679f4d164edb0a4e70c5e37c2fa5ed
SHA512 a8bd058c267752635cce9b5865f99a2ececccc5fb9970f32dd92fb46de31866a0c13937192b244345ad2099a5a08a207bc17c65246fe0f8a968bb6184f486baa
SSDEEP 3072:TYVp+k+WzTgEhOCbe4vul5f6epCHu6HuUh51hvkLk8+ebUStoAVxyhUoc:TYVpx+TEhOoeCulTwHEE51hk9Ptojm
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

83747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

InitializeCriticalSection Sleep CreateEventA LeaveCriticalSection EnterCriticalSection ResetEvent GetLocalTime DeleteCriticalSection CloseHandle SuspendThread ResumeThread CreateFileA SetupComm GetCommModemStatus ClearCommError GetCommState WaitForSingleObject EscapeCommFunction GetTickCount SetCommState SetCommTimeouts ReadFile GetOverlappedResult GetLastError SetCommMask WaitCommEvent CancelIo PurgeComm GetModuleHandleExA FreeLibrary GetModuleFileNameA GetSystemTimeAsFileTime FileTimeToSystemTime GetTimeZoneInformation GetProcAddress LoadLibraryA MultiByteToWideChar WaitForSingleObjectEx SetEvent WriteFile SystemTimeToFileTime SetEndOfFile CreateFileW ReadConsoleW WriteConsoleW SetStdHandle InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InitializeCriticalSectionEx WideCharToMultiByte GetLocaleInfoEx GetStringTypeW HeapFree HeapAlloc CreateThread GetCurrentThreadId ExitThread LoadLibraryExW HeapReAlloc IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize GetStdHandle GetModuleFileNameW GetProcessHeap SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetStartupInfoW GetModuleHandleW GetConsoleCP GetConsoleMode IsValidCodePage GetACP GetOEMCP GetFileType InitOnceExecuteOnce SetFilePointerEx FlushFileBuffers QueryPerformanceCounter GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW SetFilePointer GetUserDefaultLocaleName LCMapStringEx IsValidLocaleName EnumSystemLocalesEx OutputDebugStringW LoadLibraryW

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

setupapi

SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetClassDevsA SetupDiGetDeviceRegistryPropertyA

Sharing

General

Malware Config

Signatures

File Explorer

c958f694f25f48d033d0774dde60f0a5990ad2d8bd5f64a569428c6c71d0b56d

kernel32

advapi32

setupapi

generic