04b9dd522381f5c4d44fe5c321e963bea56e47841d8da727bcd408aa6fd05840

General

Target
04b9dd522381f5c4d44fe5c321e963bea56e47841d8da727bcd408aa6fd05840
Size 136KB
Sample240223-fejx6sbb4y
SHA256 04b9dd522381f5c4d44fe5c321e963bea56e47841d8da727bcd408aa6fd05840
MD5 d7396862e257bd1cd7e8741eb543f147
SHA1 73a69269e5fdd90df5e1a470d8bb032ea562ad7a
SHA512 44b5a79bebc0e972baa76d408c5107b8eeafba6d722968f74367b12e3290c645e4c6746c8ab4b2362cef03516760b393e5f9477cb5152034f4c85614c1c2b435
SSDEEP 3072:lvv3PzGScDkVG8R7eK/ix5cC04p/P79KhIF/f9W:V3yScQVXR7ejcCZ/Pfp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b9dd522381f5c4d44fe5c321e963bea56e47841d8da727bcd408aa6fd05840

File Explorer

04b9dd522381f5c4d44fe5c321e963bea56e47841d8da727bcd408aa6fd05840

.exe 136KB

04b9dd522381f5c4d44fe5c321e963bea56e47841d8da727bcd408aa6fd05840

IMPHASH d6867996158aeb5d44ba8f755611bbbf
SHA256 04b9dd522381f5c4d44fe5c321e963bea56e47841d8da727bcd408aa6fd05840
MD5 d7396862e257bd1cd7e8741eb543f147
SHA1 73a69269e5fdd90df5e1a470d8bb032ea562ad7a
SHA512 44b5a79bebc0e972baa76d408c5107b8eeafba6d722968f74367b12e3290c645e4c6746c8ab4b2362cef03516760b393e5f9477cb5152034f4c85614c1c2b435
SSDEEP 3072:lvv3PzGScDkVG8R7eK/ix5cC04p/P79KhIF/f9W:V3yScQVXR7ejcCZ/Pfp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5693

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcessStop GetProcessIoCounters WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MoveFileExW InterlockedDecrement CreateDirectoryW GetComputerNameW CreateNamedPipeW GetVolumeInformationA GetLocaleInfoW FatalAppExitW HeapCreate ReplaceFileW LocalHandle ReleaseSemaphore GetConsoleOutputCP GetConsoleAliasesW GetConsoleAliasesLengthW GetCurrentDirectoryW SetLastError CreateTimerQueueTimer SetStdHandle SetFileAttributesA PrepareTape LoadLibraryA LocalAlloc AddAtomW lstrcatW VirtualProtect EnumDateFormatsW GetFileTime CreateFileW WriteConsoleW GetStdHandle GetSystemDefaultLangID SetFilePointer GetStringTypeW GetLastError HeapFree EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapAlloc Sleep HeapSize GetProcAddress GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection CloseHandle WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc LoadLibraryW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar

user32

SetActiveWindow SetKeyboardState DestroyIcon GetClassLongA

advapi32

GetAce

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

04b9dd522381f5c4d44fe5c321e963bea56e47841d8da727bcd408aa6fd05840

kernel32

user32

advapi32

ole32

generic