870a1429051e334da788bcffe78d5992

General

Target
870a1429051e334da788bcffe78d5992
Size 92KB
Sample240201-q33ejagfgp
SHA256 8051adb7271b6b9b0ab8467afd99200526b96346a7888edf9c47d3c099f8e91a
MD5 870a1429051e334da788bcffe78d5992
SHA1 9cc98c655bbf4d4d8a7ed04715fd0bc4d22f803b
SHA512 f5f32cdd8d7ae36425853c17252dc3f698b73802833b3fc7a570a10086fc47d758693a6a8dbff2531735f61825f381e8febfea0a77ef1b2c3fae0330447888a8
SSDEEP 1536:sCCUNv6nomjXChNH7QKoNMGdCjwCSos1VwYnvGWg4qF8cFyi/0efCGCl1uL4b0:sCC+EomDqc+G3CSNLwY+n4qFA4CGC3ur
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
870a1429051e334da788bcffe78d5992

File Explorer

870a1429051e334da788bcffe78d5992

.exe 92KB

870a1429051e334da788bcffe78d5992

IMPHASH 3fa04588a2cb90284137e68172d17110
SHA256 8051adb7271b6b9b0ab8467afd99200526b96346a7888edf9c47d3c099f8e91a
MD5 870a1429051e334da788bcffe78d5992
SHA1 9cc98c655bbf4d4d8a7ed04715fd0bc4d22f803b
SHA512 f5f32cdd8d7ae36425853c17252dc3f698b73802833b3fc7a570a10086fc47d758693a6a8dbff2531735f61825f381e8febfea0a77ef1b2c3fae0330447888a8
SSDEEP 1536:sCCUNv6nomjXChNH7QKoNMGdCjwCSos1VwYnvGWg4qF8cFyi/0efCGCl1uL4b0:sCC+EomDqc+G3CSNLwY+n4qFA4CGC3ur
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8031

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteW ShellAboutW

gdiplus

GdipReversePath GdipNewInstalledFontCollection GdipAddPathRectangles GdipNewPrivateFontCollection GdipGetVisibleClipBounds GdipIsVisiblePoint GdipCreateBitmapFromGdiDib GdipCreateBitmapFromFileICM GdipIsClipEmpty GdipAddPathPie GdipAddPathClosedCurve GdipAddPathEllipse GdipAddPathRectangle

kernel32

GlobalHandle GlobalMemoryStatusEx GlobalReAlloc LocalSize GetCommModemStatus UnlockFile GetLogicalDrives GetCommConfig GetVolumeInformationA GetFileAttributesW CopyFileA HeapReAlloc HeapAlloc GetStartupInfoA GetProcessVersion GetModuleHandleA GetProcessShutdownParameters CloseHandle LocalUnlock GlobalFix GetNativeSystemInfo SetLocalTime HeapFree GetModuleHandleExW SignalObjectAndWait VirtualAllocEx VirtualFreeEx GetOverlappedResult GetCPInfoExW GetProcAddress FatalExit

user32

GetScrollRange GetWindowRgnBox GetMessageW ScrollDC SendMessageCallbackA RegisterHotKey GetScrollPos UnregisterHotKey BroadcastSystemMessageA RedrawWindow ScrollWindow PeekMessageA SetScrollPos InvalidateRect

advapi32

RegNotifyChangeKeyValue OpenSCManagerW GetUserNameW InitiateSystemShutdownW RegConnectRegistryA OpenThreadToken RevertToSelf RegOpenKeyExA OpenServiceW

msvcrt

memset

Name

.text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

80KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

322B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

870a1429051e334da788bcffe78d5992

shell32

gdiplus

kernel32

user32

advapi32

msvcrt

generic