930c7086d5c26f5462622a7619e5ba00

Sharing

Copy URL Twitter E-mail

General

Target
930c7086d5c26f5462622a7619e5ba00
Size 849KB
Sample240205-1c1hcsaffn
SHA256 6a327f3cd88bf5edc3e926c829e6ae1ff4fc87425c45e65a234b233b7058ce7a
MD5 930c7086d5c26f5462622a7619e5ba00
SHA1 7dcb02bd1b0807bd6b3eda3c474672420d7141b4
SHA512 e22ed1220f0307950199ce84b573b6aed7f8542f72ade82c252adaa92cf08e602ba34efb8f1b915364e4415f264063dcbbfc7e7ded10c38d1a031809cc8e8de2
SSDEEP 12288:P3RvScc4U+O1lSON7iosJAlqKlh/hh6K71l0BljJTHbRAZ:PRvxcBP3nsJCqKJoyDQLTHb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
930c7086d5c26f5462622a7619e5ba00

File Explorer

930c7086d5c26f5462622a7619e5ba00

.exe 849KB

930c7086d5c26f5462622a7619e5ba00

IMPHASH 9339595d0c765c7f0c11680ac479a248
SHA256 6a327f3cd88bf5edc3e926c829e6ae1ff4fc87425c45e65a234b233b7058ce7a
MD5 930c7086d5c26f5462622a7619e5ba00
SHA1 7dcb02bd1b0807bd6b3eda3c474672420d7141b4
SHA512 e22ed1220f0307950199ce84b573b6aed7f8542f72ade82c252adaa92cf08e602ba34efb8f1b915364e4415f264063dcbbfc7e7ded10c38d1a031809cc8e8de2
SSDEEP 12288:P3RvScc4U+O1lSON7iosJAlqKlh/hh6K71l0BljJTHbRAZ:PRvxcBP3nsJCqKJoyDQLTHb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

915234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateThread GlobalUnlock GlobalLock GlobalAlloc GetTickCount WideCharToMultiByte IsBadReadPtr GlobalAddAtomA GlobalAddAtomW GetModuleHandleA GlobalFree GlobalGetAtomNameA GlobalDeleteAtom GlobalGetAtomNameW FreeConsole GetEnvironmentVariableA VirtualProtect VirtualAlloc GetProcAddress GetLastError LoadLibraryA SetLastError SetThreadPriority GetCurrentThread CreateProcessA GetCommandLineA GetStartupInfoA SetEnvironmentVariableA ReleaseMutex WaitForSingleObject CreateMutexA OpenMutexA GetCurrentThreadId CreateFileA FindClose FindFirstFileA FindFirstFileW VirtualQueryEx GetExitCodeProcess ReadProcessMemory UnmapViewOfFile ContinueDebugEvent SetThreadContext GetThreadContext WaitForDebugEvent SuspendThread DebugActiveProcess ResumeThread CreateProcessW GetCommandLineW GetStartupInfoW CloseHandle DuplicateHandle GetCurrentProcess CreateFileMappingA VirtualProtectEx WriteProcessMemory ExitProcess FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA HeapSize HeapReAlloc QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RtlUnwind DeleteCriticalSection GetStdHandle WriteFile TlsFree TlsSetValue TlsAlloc Sleep EnterCriticalSection LeaveCriticalSection GetVersionExA InitializeCriticalSection GetCurrentProcessId GetModuleFileNameW GetShortPathNameW GetModuleFileNameA MapViewOfFile GetShortPathNameA GetSystemTimeAsFileTime HeapFree HeapAlloc GetProcessHeap RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue

user32

GetDesktopWindow MoveWindow SetPropA EnumThreadWindows GetPropA GetMessageA GetSystemMetrics SetTimer GetAsyncKeyState KillTimer BeginPaint EndPaint SetWindowTextA GetDlgItem CreateDialogIndirectParamA ShowWindow UpdateWindow LoadStringA LoadStringW FindWindowA WaitForInputIdle MessageBoxA InSendMessage UnpackDDElParam FreeDDElParam DefWindowProcA LoadCursorA RegisterClassW CreateWindowExW RegisterClassA CreateWindowExA GetWindowThreadProcessId SendMessageW SendMessageA PeekMessageA TranslateMessage DispatchMessageA EnumWindows IsWindowUnicode PackDDElParam PostMessageW PostMessageA IsWindow DestroyWindow

gdi32

CreateDCA CreateDIBitmap CreateCompatibleDC SelectObject SelectPalette RealizePalette BitBlt DeleteDC DeleteObject CreatePalette

Name

.text

Size

Virtual Size

224KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

387KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text1

Size

268KB

Virtual Size

320KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

52KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

44KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc1

Size

20KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

452KB

Virtual Size

512KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

930c7086d5c26f5462622a7619e5ba00

kernel32

user32

gdi32

generic