b273cb8fad5fa08ce136059b0fb5ea9acfd42ec2fe43a5d015cc1d1861a9e2ca

General

Target
b273cb8fad5fa08ce136059b0fb5ea9acfd42ec2fe43a5d015cc1d1861a9e2ca
Size 815KB
Sample240216-ljtk3aga77
SHA256 b273cb8fad5fa08ce136059b0fb5ea9acfd42ec2fe43a5d015cc1d1861a9e2ca
MD5 7bf20d590631be9b23676b29c206c83d
SHA1 cc762d897dc08e3725bf3973fe03995801867a57
SHA512 6205796bc0f8a36072e0f38192959ad1f02d27273e31ae0e4c6500bf137e12c9213b9f52288ca45ca93cd2d61470c17e4d52bcf54d8b29d43ee78fd05629f9e2
SSDEEP 24576:oC4+m6l9eoc0Mnkz12do394OlKlFogR0:oC4+9wN06geo3mb7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b273cb8fad5fa08ce136059b0fb5ea9acfd42ec2fe43a5d015cc1d1861a9e2ca

File Explorer

b273cb8fad5fa08ce136059b0fb5ea9acfd42ec2fe43a5d015cc1d1861a9e2ca

.exe 815KB

b273cb8fad5fa08ce136059b0fb5ea9acfd42ec2fe43a5d015cc1d1861a9e2ca

IMPHASH 06795e7a4243010ba1cddcdd6acb03bf
SHA256 b273cb8fad5fa08ce136059b0fb5ea9acfd42ec2fe43a5d015cc1d1861a9e2ca
MD5 7bf20d590631be9b23676b29c206c83d
SHA1 cc762d897dc08e3725bf3973fe03995801867a57
SHA512 6205796bc0f8a36072e0f38192959ad1f02d27273e31ae0e4c6500bf137e12c9213b9f52288ca45ca93cd2d61470c17e4d52bcf54d8b29d43ee78fd05629f9e2
SSDEEP 24576:oC4+m6l9eoc0Mnkz12do394OlKlFogR0:oC4+9wN06geo3mb7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6315

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SystemTimeToTzSpecificLocalTime HeapAlloc SystemTimeToFileTime CreateDirectoryW SetEvent FreeEnvironmentStringsA GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA LoadLibraryW AssignProcessToJobObject ReplaceFileW FlushFileBuffers GetCurrentDirectoryW WriteConsoleOutputCharacterA lstrcmpiA GetProcAddress CreateNamedPipeA LoadLibraryA LocalAlloc SetProcessWorkingSetSize AddAtomA EnumDateFormatsA EraseTape VirtualProtect CompareStringA FatalAppExitA IsValidLocale EnumSystemLocalesA SetLastError GetComputerNameA GetLocaleInfoA GetUserDefaultLCID GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy EncodePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetLastError SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapFree Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind HeapReAlloc IsProcessorFeaturePresent LCMapStringW MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode SetFilePointer CloseHandle WriteConsoleW SetStdHandle CreateFileW RaiseException

user32

GetClassLongW

advapi32

AccessCheckByType

ole32

CreateDataCache

Sharing

General

Malware Config

Signatures

File Explorer

b273cb8fad5fa08ce136059b0fb5ea9acfd42ec2fe43a5d015cc1d1861a9e2ca

kernel32

user32

advapi32

ole32

generic