8b8e12ac5250ba8223fe60dfc7ebee3d22d024c3559668b86ed003335b196c1c

General

Target
8b8e12ac5250ba8223fe60dfc7ebee3d22d024c3559668b86ed003335b196c1c
Size 164KB
Sample240227-ffzd9agf28
SHA256 8b8e12ac5250ba8223fe60dfc7ebee3d22d024c3559668b86ed003335b196c1c
MD5 c7e909d16fbebfbaf79cfb035ca2a39e
SHA1 2a532e5373cf513995ca3062b6ce110be8785f64
SHA512 db5c922281a8827438fa05606dc1944e03638656fc7fff2ffdbbf7642acc0fe2387df7488c1be739aacd58096b7a0f22cefa894b28d5a7eb885772d8edcd5f35
SSDEEP 3072:VxQ3f7CCQDou0GplVh/Ud+ZbozbqPCS4b2f14+AhjIZ:VxuWCQsullfUgZM0CHg4JI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b8e12ac5250ba8223fe60dfc7ebee3d22d024c3559668b86ed003335b196c1c

File Explorer

8b8e12ac5250ba8223fe60dfc7ebee3d22d024c3559668b86ed003335b196c1c

.exe 164KB

8b8e12ac5250ba8223fe60dfc7ebee3d22d024c3559668b86ed003335b196c1c

IMPHASH d18a17df2dd2cbbcb831b31c6fe01dcb
SHA256 8b8e12ac5250ba8223fe60dfc7ebee3d22d024c3559668b86ed003335b196c1c
MD5 c7e909d16fbebfbaf79cfb035ca2a39e
SHA1 2a532e5373cf513995ca3062b6ce110be8785f64
SHA512 db5c922281a8827438fa05606dc1944e03638656fc7fff2ffdbbf7642acc0fe2387df7488c1be739aacd58096b7a0f22cefa894b28d5a7eb885772d8edcd5f35
SSDEEP 3072:VxQ3f7CCQDou0GplVh/Ud+ZbozbqPCS4b2f14+AhjIZ:VxuWCQsullfUgZM0CHg4JI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5693

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MoveFileExW InterlockedDecrement CreateDirectoryW GetUserDefaultLCID GetComputerNameW CreateNamedPipeW GetConsoleAliasesLengthA GetLocaleInfoW FatalAppExitW HeapCreate GetTapePosition ReplaceFileW LocalHandle GetTimeZoneInformation ReleaseSemaphore GetConsoleOutputCP GetProcessIoCounters GetCurrentDirectoryW SetLastError CreateTimerQueueTimer SetStdHandle SetFileAttributesA LoadLibraryA LocalAlloc AddAtomA lstrcatW VirtualProtect EnumDateFormatsW GetFileTime FindAtomW GetVolumeInformationW CreateFileW WriteConsoleW SetFilePointer GetConsoleAliasExesLengthA GetStdHandle DebugActiveProcessStop GetStringTypeW MultiByteToWideChar GetLastError HeapFree EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapAlloc Sleep HeapSize GetProcAddress GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection CloseHandle WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc LoadLibraryW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW

user32

SetActiveWindow SetKeyboardState CreateIcon GetClassLongA

advapi32

OpenThreadToken GetAce

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

8b8e12ac5250ba8223fe60dfc7ebee3d22d024c3559668b86ed003335b196c1c

kernel32

user32

advapi32

ole32

generic