7b237f5378187373a67114d738cedc4c

General

Target
7b237f5378187373a67114d738cedc4c
Size 679KB
Sample240127-ynjb4scgdr
SHA256 8dec5ed95d3ca077bb1c2695074877a7160f97960df22a119d9f2debfb18dc0b
MD5 7b237f5378187373a67114d738cedc4c
SHA1 56341c81d80a8cb85c7b8ad0fe65a64572860ffe
SHA512 1065b5f7ccd2cff48cf80e62c7840cc81b3cd9f863cc3eabdc5ea47a6d1d69ce910273c589d5e355bb6519fb7a0c25ac15317a3f1053fe519ae1497c3b23db27
SSDEEP 12288:iKMJZ4sLubXEqY+o6iYmTAvsm4HHeXg/8V:j0ZhLuAqYz6UTAd4HHT/e
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b237f5378187373a67114d738cedc4c

File Explorer

7b237f5378187373a67114d738cedc4c

.exe 679KB

7b237f5378187373a67114d738cedc4c

IMPHASH 457e32d3dd9c9bc4442beae8353acab7
SHA256 8dec5ed95d3ca077bb1c2695074877a7160f97960df22a119d9f2debfb18dc0b
MD5 7b237f5378187373a67114d738cedc4c
SHA1 56341c81d80a8cb85c7b8ad0fe65a64572860ffe
SHA512 1065b5f7ccd2cff48cf80e62c7840cc81b3cd9f863cc3eabdc5ea47a6d1d69ce910273c589d5e355bb6519fb7a0c25ac15317a3f1053fe519ae1497c3b23db27
SSDEEP 12288:iKMJZ4sLubXEqY+o6iYmTAvsm4HHeXg/8V:j0ZhLuAqYz6UTAd4HHT/e
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

138097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FormatMessageW VirtualProtect CreateFileW CloseHandle GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize SetFilePointerEx GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc LCMapStringW GetFileType HeapAlloc HeapFree GetModuleHandleExW ExitProcess GetModuleFileNameW WriteFile GetStdHandle WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW WriteConsoleW

user32

MessageBoxW GrayStringA GetDC TranslateMessage DispatchMessageW PeekMessageW DefWindowProcW PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW ShowWindow SetCapture ReleaseCapture LoadImageW LoadCursorW SetWindowLongW GetWindowLongW AdjustWindowRect UpdateWindow

d3d11

D3D11CreateDeviceAndSwapChain

gdiplus

GdiplusStartup GdiplusShutdown

Sharing

General

Malware Config

Signatures

File Explorer

7b237f5378187373a67114d738cedc4c

kernel32

user32

d3d11

gdiplus

generic