7fb6f4efd927d48390a6404b3af9a578

General

Target
7fb6f4efd927d48390a6404b3af9a578
Size 246KB
Sample240129-ngcwmsaacm
SHA256 7bf0193f9ffcc698c97454ffb9534a56efde8783c3c2761bcba7f7cd229d64c1
MD5 7fb6f4efd927d48390a6404b3af9a578
SHA1 5a6084a0d80d47303e1fb7c12ceb11b3a212535e
SHA512 f6e89867ace3c1c34a6fa4e67fcf597334e09fe73065ac30fb7ea121fcdad1b247bc0756f4deecf885c92a4f819f699501c7d854e18e304648071d00451feeac
SSDEEP 6144:3lgP+XS/VtTBwRur5ZY4mgetsRD0O1xejlrMbaqJ:+CS9tTrZZmRu4O3eZrMbnJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fb6f4efd927d48390a6404b3af9a578

File Explorer

7fb6f4efd927d48390a6404b3af9a578

.exe 246KB

7fb6f4efd927d48390a6404b3af9a578

IMPHASH 548af148668b922225bc9f37812016c0
SHA256 7bf0193f9ffcc698c97454ffb9534a56efde8783c3c2761bcba7f7cd229d64c1
MD5 7fb6f4efd927d48390a6404b3af9a578
SHA1 5a6084a0d80d47303e1fb7c12ceb11b3a212535e
SHA512 f6e89867ace3c1c34a6fa4e67fcf597334e09fe73065ac30fb7ea121fcdad1b247bc0756f4deecf885c92a4f819f699501c7d854e18e304648071d00451feeac
SSDEEP 6144:3lgP+XS/VtTBwRur5ZY4mgetsRD0O1xejlrMbaqJ:+CS9tTrZZmRu4O3eZrMbnJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

94208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFileTimeToFileTime SystemTimeToFileTime CreateFileA LoadResource FindResourceA GetTempPathA ResumeThread CreateProcessA SetThreadPriority GetCurrentThread SetPriorityClass GetCurrentProcess lstrcatA GetEnvironmentVariableA GetShortPathNameA GetModuleFileNameA Process32Next SetFileTime CreateToolhelp32Snapshot TerminateProcess OpenProcess MoveFileExA Module32First FreeLibrary GetProcAddress LoadLibraryA GetSystemDirectoryA GetLastError DeviceIoControl GlobalFree LoadLibraryExA GlobalAlloc GetModuleHandleA ReadFile GetFileSize SizeofResource WriteFile CloseHandle FreeResource MoveFileA SetFileAttributesA DeleteFileA Process32First GetTickCount GetStartupInfoA

user32

wsprintfA

advapi32

OpenSCManagerA StartServiceA CloseServiceHandle OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges ControlService OpenServiceA

shlwapi

StrStrIA

msvcrt

_controlfp rand srand strstr printf puts ??2@YAPAXI@Z ??3@YAXPAX@Z _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3

Sharing

General

Malware Config

Signatures

File Explorer

7fb6f4efd927d48390a6404b3af9a578

kernel32

user32

advapi32

shlwapi

msvcrt

generic