3be6dbda5b7e9826fe8c4793051b2ac1e9ddd1e3cc7e56e5d4a9c612414a5daf

General

Target
3be6dbda5b7e9826fe8c4793051b2ac1e9ddd1e3cc7e56e5d4a9c612414a5daf
Size 248KB
Sample240217-jb41qada34
SHA256 3be6dbda5b7e9826fe8c4793051b2ac1e9ddd1e3cc7e56e5d4a9c612414a5daf
MD5 cf2764813e89728cd7c18b6cd78327b9
SHA1 6c6c48fb5c7f2f19fddeac82d63bdf67d6ee474e
SHA512 362a220086a3510b18eecc8034d41e6b1c1fb24415d3da972aac0f94e154e27c40252b49e5b64fa090ffd50c339ee5d2f24da9743fdbd96d01fc569546f7c2d8
SSDEEP 6144:uZ/hMtxJK3sjADoUXdhhwjqVJojKr1WFAko:U/hMtx83sjA8UXJaqVJDrX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3be6dbda5b7e9826fe8c4793051b2ac1e9ddd1e3cc7e56e5d4a9c612414a5daf

File Explorer

3be6dbda5b7e9826fe8c4793051b2ac1e9ddd1e3cc7e56e5d4a9c612414a5daf

.exe 248KB

3be6dbda5b7e9826fe8c4793051b2ac1e9ddd1e3cc7e56e5d4a9c612414a5daf

IMPHASH a23f80ebb5180166b721931b00404ab4
SHA256 3be6dbda5b7e9826fe8c4793051b2ac1e9ddd1e3cc7e56e5d4a9c612414a5daf
MD5 cf2764813e89728cd7c18b6cd78327b9
SHA1 6c6c48fb5c7f2f19fddeac82d63bdf67d6ee474e
SHA512 362a220086a3510b18eecc8034d41e6b1c1fb24415d3da972aac0f94e154e27c40252b49e5b64fa090ffd50c339ee5d2f24da9743fdbd96d01fc569546f7c2d8
SSDEEP 6144:uZ/hMtxJK3sjADoUXdhhwjqVJojKr1WFAko:U/hMtx83sjA8UXJaqVJDrX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SystemTimeToTzSpecificLocalTime HeapAlloc SystemTimeToFileTime SetEvent GetTickCount CreateNamedPipeW GetConsoleAliasesA GetConsoleAliasesLengthA WriteFile LoadLibraryW GetLocaleInfoW AssignProcessToJobObject ReplaceFileA FlushFileBuffers CreateDirectoryA WriteConsoleOutputCharacterW SetLastError lstrcmpiA GetProcAddress LoadLibraryA GetProcessWorkingSetSize LocalAlloc AddAtomW EraseTape FreeEnvironmentStringsW VirtualProtect EnumDateFormatsW FatalAppExitA EnumSystemLocalesA GetLocaleInfoA GetCurrentDirectoryW GetComputerNameA GetUserDefaultLCID CreateFileW EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree IsProcessorFeaturePresent GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy Sleep HeapSize EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapReAlloc RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle WriteConsoleW SetStdHandle IsValidLocale

user32

GetClassLongW

advapi32

AccessCheckByType

ole32

CreateDataAdviseHolder

Sharing

General

Malware Config

Signatures

File Explorer

3be6dbda5b7e9826fe8c4793051b2ac1e9ddd1e3cc7e56e5d4a9c612414a5daf

kernel32

user32

advapi32

ole32

generic