818e83a6f88f34e7dc343f267a30b651d578a9e9786c95bc2a76ab33d58f74b8

General

Target
818e83a6f88f34e7dc343f267a30b651d578a9e9786c95bc2a76ab33d58f74b8
Size 666KB
Sample240223-ffgt7sbb61
SHA256 818e83a6f88f34e7dc343f267a30b651d578a9e9786c95bc2a76ab33d58f74b8
MD5 685962facc72ed816ebc86f021449044
SHA1 06459254112ad371328b0fc66210818ad5c048c8
SHA512 d261caefbe9f4029733b2ff62e2dee9f993c4f6fbc794ac6fb4d9e6cec54814ff4ecd758809f79457c8665b61a1e72626e2acfe7b8312484890b274aaf48d004
SSDEEP 12288:tmBzNXVdhzsBY000HojIS1Lz7kvixqYAPn4kHJYfLuns7cPUrTRF/4ytT:cDjzsBYUy13EiPAPnXJYfqsdV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
818e83a6f88f34e7dc343f267a30b651d578a9e9786c95bc2a76ab33d58f74b8

File Explorer

818e83a6f88f34e7dc343f267a30b651d578a9e9786c95bc2a76ab33d58f74b8

.exe 666KB

818e83a6f88f34e7dc343f267a30b651d578a9e9786c95bc2a76ab33d58f74b8

IMPHASH 6b014a9c7aeac94cee60e9400b7ef9c4
SHA256 818e83a6f88f34e7dc343f267a30b651d578a9e9786c95bc2a76ab33d58f74b8
MD5 685962facc72ed816ebc86f021449044
SHA1 06459254112ad371328b0fc66210818ad5c048c8
SHA512 d261caefbe9f4029733b2ff62e2dee9f993c4f6fbc794ac6fb4d9e6cec54814ff4ecd758809f79457c8665b61a1e72626e2acfe7b8312484890b274aaf48d004
SSDEEP 12288:tmBzNXVdhzsBY000HojIS1Lz7kvixqYAPn4kHJYfLuns7cPUrTRF/4ytT:cDjzsBYUy13EiPAPnXJYfqsdV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcessStop GetProcessIoCounters WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MoveFileExW InterlockedDecrement CreateDirectoryW GetComputerNameW CreateNamedPipeW GetVolumeInformationA GetLocaleInfoW FatalAppExitW HeapCreate ReplaceFileW LocalHandle ReleaseSemaphore GetConsoleOutputCP GetConsoleAliasesW GetConsoleAliasesLengthW GetCurrentDirectoryW SetLastError CreateTimerQueueTimer SetStdHandle SetFileAttributesA PrepareTape LoadLibraryA LocalAlloc AddAtomW lstrcatW VirtualProtect EnumDateFormatsW GetFileTime CreateFileW WriteConsoleW GetStdHandle GetSystemDefaultLangID CloseHandle SetFilePointer HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW Sleep HeapSize EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LoadLibraryW HeapReAlloc RtlUnwind HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW

user32

SetActiveWindow SetKeyboardState DestroyIcon GetClassLongA

advapi32

GetAce

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

818e83a6f88f34e7dc343f267a30b651d578a9e9786c95bc2a76ab33d58f74b8

kernel32

user32

advapi32

ole32

generic