ae6c389a5f247b3249b96bd4a6fb52d59227ee9def9fc34eb45b2e790ccb66b0

General

Target
ae6c389a5f247b3249b96bd4a6fb52d59227ee9def9fc34eb45b2e790ccb66b0
Size 136KB
Sample240223-ffx67abg66
SHA256 ae6c389a5f247b3249b96bd4a6fb52d59227ee9def9fc34eb45b2e790ccb66b0
MD5 6dc062eeeb6fbb9b4e02f3c8fd72436d
SHA1 0b1ca5fa298b47bc0e5b5131fd1d72a91edd157b
SHA512 f1acb133f8a30c99c33d6750ff6d01a50e5b76b133d733f4b236501cb4ae4d2585c4d9e844e74380c21ad5b0c6118f76369bbef0841611ac040f71d5aa6d16d7
SSDEEP 3072:sHRLMRy16ncyT2m2/6J5sWNjDfBVd3TgIP2TO:rM16nc6d35NV5Lj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae6c389a5f247b3249b96bd4a6fb52d59227ee9def9fc34eb45b2e790ccb66b0

File Explorer

ae6c389a5f247b3249b96bd4a6fb52d59227ee9def9fc34eb45b2e790ccb66b0

.exe 136KB

ae6c389a5f247b3249b96bd4a6fb52d59227ee9def9fc34eb45b2e790ccb66b0

IMPHASH c31314cf048d3172c5e805dd0c22f1ae
SHA256 ae6c389a5f247b3249b96bd4a6fb52d59227ee9def9fc34eb45b2e790ccb66b0
MD5 6dc062eeeb6fbb9b4e02f3c8fd72436d
SHA1 0b1ca5fa298b47bc0e5b5131fd1d72a91edd157b
SHA512 f1acb133f8a30c99c33d6750ff6d01a50e5b76b133d733f4b236501cb4ae4d2585c4d9e844e74380c21ad5b0c6118f76369bbef0841611ac040f71d5aa6d16d7
SSDEEP 3072:sHRLMRy16ncyT2m2/6J5sWNjDfBVd3TgIP2TO:rM16nc6d35NV5Lj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalUnlock PulseEvent GetConsoleAliasesLengthW GetProcessIoCounters WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime InterlockedDecrement CreateDirectoryW CreateNamedPipeW GetLocaleInfoW FatalAppExitW SetConsoleCP HeapCreate ReplaceFileA GetConsoleAliasesW GetStdHandle GetCurrentDirectoryW GetComputerNameA CreateTimerQueueTimer SetStdHandle SetFileAttributesA PrepareTape LoadLibraryA LocalAlloc AddAtomA DebugSetProcessKillOnExit lstrcatW VirtualProtect EnumDateFormatsW GetFileTime GetVolumeInformationW CreateFileW WriteConsoleW SetLastError GetSystemDefaultLangID CloseHandle SetFilePointer HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW Sleep HeapSize EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LoadLibraryW HeapReAlloc RtlUnwind HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW

user32

SetActiveWindow SetKeyboardState DestroyIcon GetClassLongA

advapi32

GetAce

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

ae6c389a5f247b3249b96bd4a6fb52d59227ee9def9fc34eb45b2e790ccb66b0

kernel32

user32

advapi32

ole32

generic