86fb6d876200f1159b7785764f510a01fb173d4a48b4e9a1924c8afc420a7562

General

Target
86fb6d876200f1159b7785764f510a01fb173d4a48b4e9a1924c8afc420a7562
Size 755KB
Sample240128-2avd1abdf6
SHA256 86fb6d876200f1159b7785764f510a01fb173d4a48b4e9a1924c8afc420a7562
MD5 70941bc38ac5bdfef9ed4e5c2a11513d
SHA1 56de5da9e2980c8af17d23c8ef61d620b0d198e7
SHA512 d2c90f00fe242583ebcc41697170bab3db64f5405de5c5dcd14f2257761ac61f0686b1252093a5330c0fad4f44d84cb5da29500f87b854bcf9258c173e5407aa
SSDEEP 12288:UNNsAnwuOcZmCxKCDXkcKTJmMU+ASRviZ21hH63HLY81X:eG89kbTJIRbahHIHL/1X
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86fb6d876200f1159b7785764f510a01fb173d4a48b4e9a1924c8afc420a7562

File Explorer

86fb6d876200f1159b7785764f510a01fb173d4a48b4e9a1924c8afc420a7562

.exe 755KB

86fb6d876200f1159b7785764f510a01fb173d4a48b4e9a1924c8afc420a7562

IMPHASH 776366fc550d6850ffd7c9ac6fe41209
SHA256 86fb6d876200f1159b7785764f510a01fb173d4a48b4e9a1924c8afc420a7562
MD5 70941bc38ac5bdfef9ed4e5c2a11513d
SHA1 56de5da9e2980c8af17d23c8ef61d620b0d198e7
SHA512 d2c90f00fe242583ebcc41697170bab3db64f5405de5c5dcd14f2257761ac61f0686b1252093a5330c0fad4f44d84cb5da29500f87b854bcf9258c173e5407aa
SSDEEP 12288:UNNsAnwuOcZmCxKCDXkcKTJmMU+ASRviZ21hH63HLY81X:eG89kbTJIRbahHIHL/1X
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait GetNativeSystemInfo GetStringTypeA MoveFileExA FindResourceW SystemTimeToTzSpecificLocalTime HeapAlloc InterlockedDecrement SetComputerNameW GetTickCount LocalFlags GetConsoleAliasesA WideCharToMultiByte LoadLibraryW GetLocaleInfoW GetAtomNameW ReadFile GetEnvironmentVariableA CompareStringW WritePrivateProfileStringW RaiseException GetLastError GetProcAddress GetLongPathNameA LoadLibraryA LocalAlloc SetCurrentDirectoryW OpenJobObjectW SetSystemTime SetConsoleTitleW CancelIo FreeEnvironmentStringsW ReleaseMutex EndUpdateResourceA EnumCalendarInfoExA SetFileAttributesW GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapFree Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize HeapReAlloc IsProcessorFeaturePresent LCMapStringW MultiByteToWideChar GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale

Sharing

General

Malware Config

Signatures

File Explorer

86fb6d876200f1159b7785764f510a01fb173d4a48b4e9a1924c8afc420a7562

kernel32

generic