76baa8d35ea656b972c92c94c8d3fe86

General

Target
76baa8d35ea656b972c92c94c8d3fe86
Size 757KB
Sample240126-h56kzagff2
SHA256 6d308c2e93c341ef11c0b14420e158fd650c637190a4daedf003ec091e703a85
MD5 76baa8d35ea656b972c92c94c8d3fe86
SHA1 299252b754314595762b552842c3e6ee160e4313
SHA512 7b4bdc8a763cd9f2a188b3f1bef2fc89e9bf5578c764621b19d28ea5be393cbc05127600d8528e78c8cdc8a0223f2b6d9a1c4ef1e5ce9caa464898aeaa0d3852
SSDEEP 12288:T1Wl8T5gM63xjmetfdPZ5TyUF0L7Rl5Z1r+:TA2GdxXDyUFc7v5jC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76baa8d35ea656b972c92c94c8d3fe86

File Explorer

76baa8d35ea656b972c92c94c8d3fe86

.exe 757KB

76baa8d35ea656b972c92c94c8d3fe86

IMPHASH 49be0836dac021f86af2cb207b4613c8
SHA256 6d308c2e93c341ef11c0b14420e158fd650c637190a4daedf003ec091e703a85
MD5 76baa8d35ea656b972c92c94c8d3fe86
SHA1 299252b754314595762b552842c3e6ee160e4313
SHA512 7b4bdc8a763cd9f2a188b3f1bef2fc89e9bf5578c764621b19d28ea5be393cbc05127600d8528e78c8cdc8a0223f2b6d9a1c4ef1e5ce9caa464898aeaa0d3852
SSDEEP 12288:T1Wl8T5gM63xjmetfdPZ5TyUF0L7Rl5Z1r+:TA2GdxXDyUFc7v5jC
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

134730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OutputDebugStringW FormatMessageW VirtualProtect HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileSizeEx SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetProcessHeap WriteFile ExitProcess HeapReAlloc HeapFree HeapAlloc WriteConsoleW GetModuleHandleExW GetModuleFileNameW GetFileType GetStdHandle LoadLibraryExW WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetCPInfo CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary CreateFileW

user32

GrayStringA GetDC TranslateMessage DispatchMessageW PeekMessageW DefWindowProcW PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW ShowWindow SetCapture ReleaseCapture LoadImageW LoadCursorW SetWindowLongW GetWindowLongW AdjustWindowRect UpdateWindow

d3d11

D3D11CreateDeviceAndSwapChain

gdiplus

GdiplusStartup GdiplusShutdown

Sharing

General

Malware Config

Signatures

File Explorer

76baa8d35ea656b972c92c94c8d3fe86

kernel32

user32

d3d11

gdiplus

generic