a01ccf9ea1cd42165dcf68211a819193

General

Target
a01ccf9ea1cd42165dcf68211a819193
Size 463KB
Sample240216-l7tkzagc6t
SHA256 cac5a5a1cd604a792b9231fb65fe38110c631873cfa834bf4f43b9418d1ec17f
MD5 a01ccf9ea1cd42165dcf68211a819193
SHA1 f6bcccfe7a15aa6ec76aa60e27e84f81ce966019
SHA512 edfe36fbd1238d7249d57efa8922369801144bf64908b1b9607ab387003f40363bad164b00965490b9cb4c0e1fc30a00fcf95916e5afa28b60aa6f5c3e6225fd
SSDEEP 12288:IsZnGIIyuA5qe7RZlSzE7hvaVciuK8Ipuu3AnbSUsFkJ:IsZnGUuvy23LouCSUfJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a01ccf9ea1cd42165dcf68211a819193

File Explorer

a01ccf9ea1cd42165dcf68211a819193

.exe 463KB

a01ccf9ea1cd42165dcf68211a819193

IMPHASH 3843c741cdc52e7d421ce37832f6b109
SHA256 cac5a5a1cd604a792b9231fb65fe38110c631873cfa834bf4f43b9418d1ec17f
MD5 a01ccf9ea1cd42165dcf68211a819193
SHA1 f6bcccfe7a15aa6ec76aa60e27e84f81ce966019
SHA512 edfe36fbd1238d7249d57efa8922369801144bf64908b1b9607ab387003f40363bad164b00965490b9cb4c0e1fc30a00fcf95916e5afa28b60aa6f5c3e6225fd
SSDEEP 12288:IsZnGIIyuA5qe7RZlSzE7hvaVciuK8Ipuu3AnbSUsFkJ:IsZnGUuvy23LouCSUfJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

26038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenW MultiByteToWideChar WideCharToMultiByte GetConsoleOutputCP lstrcpyW DecodePointer SetEndOfFile HeapReAlloc lstrcmpiW lstrcmpW FormatMessageW LocalFree GetProcAddress GetModuleHandleW GetLastError CloseHandle WriteFile CreateFileW WriteConsoleW GetStdHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetStringTypeW GetFileType ReadFile GetConsoleMode ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle CompareStringW LCMapStringW GetProcessHeap SetFilePointerEx FlushFileBuffers GetConsoleCP HeapSize RaiseException

user32

GetDC GrayStringA MessageBoxA

advapi32

RegSetValueExW RegQueryValueExW RegOpenKeyExW RegOpenKeyW RegEnumValueW RegEnumKeyExW RegDeleteValueW RegCreateKeyExW RegCreateKeyW RegCloseKey RegDeleteTreeW

Sharing

General

Malware Config

Signatures

File Explorer

a01ccf9ea1cd42165dcf68211a819193

kernel32

user32

advapi32

generic