1a0c9d76d6bd6cf708c1939bb3f4748ccb40b0a4b0c880c6eba432be1a5910f2

General

Target
1a0c9d76d6bd6cf708c1939bb3f4748ccb40b0a4b0c880c6eba432be1a5910f2
Size 135KB
Sample240221-ffvfascc25
SHA256 1a0c9d76d6bd6cf708c1939bb3f4748ccb40b0a4b0c880c6eba432be1a5910f2
MD5 f44d0f75c3746989168af456468d553c
SHA1 1bda6154c5dc86f5132fab036a30ae3b55041593
SHA512 524a44375acf65cc1daf98c4ed281ca8b6e8d128b0a76a05dd2a543c78d8357ea6e81baa1ad487a8f36280a4bd2c5c757e68467359e26876ba56328927ab406f
SSDEEP 1536:93HKFCXebMDnye3MtblERG2DnWQezmfsHL7bcVnhzU+dhj1eE37i9SOpk6ovchdf:5HKCXeC3VdCHnE9Uch5p7iIXQEs1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a0c9d76d6bd6cf708c1939bb3f4748ccb40b0a4b0c880c6eba432be1a5910f2

File Explorer

1a0c9d76d6bd6cf708c1939bb3f4748ccb40b0a4b0c880c6eba432be1a5910f2

.exe 135KB

1a0c9d76d6bd6cf708c1939bb3f4748ccb40b0a4b0c880c6eba432be1a5910f2

IMPHASH a37a56386d50d63537592aa5b62333a6
SHA256 1a0c9d76d6bd6cf708c1939bb3f4748ccb40b0a4b0c880c6eba432be1a5910f2
MD5 f44d0f75c3746989168af456468d553c
SHA1 1bda6154c5dc86f5132fab036a30ae3b55041593
SHA512 524a44375acf65cc1daf98c4ed281ca8b6e8d128b0a76a05dd2a543c78d8357ea6e81baa1ad487a8f36280a4bd2c5c757e68467359e26876ba56328927ab406f
SSDEEP 1536:93HKFCXebMDnye3MtblERG2DnWQezmfsHL7bcVnhzU+dhj1eE37i9SOpk6ovchdf:5HKCXeC3VdCHnE9Uch5p7iIXQEs1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5551

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA InterlockedDecrement GetSystemDefaultLCID GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GetProcessTimes LoadLibraryW GetLocaleInfoW SetConsoleCP HeapDestroy ReplaceFileA FlushFileBuffers CreateDirectoryA GetConsoleAliasesW ChangeTimerQueueTimer SetLastError GetProcAddress LocalUnlock SetStdHandle PrepareTape ResetEvent LoadLibraryA LocalAlloc AddAtomA DebugSetProcessKillOnExit lstrcatW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA FileTimeToLocalFileTime GetVolumeInformationW WriteConsoleW CloseHandle SetFilePointer CreateNamedPipeA GetComputerNameA GetConsoleMode GetConsoleCP HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate Sleep HeapSize EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc RtlUnwind HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW CreateFileW

user32

GetForegroundWindow GetClassLongA

advapi32

OpenThreadToken

ole32

CreateDataAdviseHolder

Sharing

General

Malware Config

Signatures

File Explorer

1a0c9d76d6bd6cf708c1939bb3f4748ccb40b0a4b0c880c6eba432be1a5910f2

kernel32

user32

advapi32

ole32

generic