d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6

General

Target
d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6
Size 275KB
Sample240227-fg8djsgf62
SHA256 d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6
MD5 ee8940bc2a47d26bdcd3347815f03117
SHA1 22a02bf284ea145bba0535dd33c48214995e71d5
SHA512 eed51379e48cfb13f7ed48b4e2d47951f6c6ed49841b18ba3b92d0f5872f741d201ea539de9542f4333276a8c54672bd60505ab57d89bc3f1f54caade02e126c
SSDEEP 6144:J4t+SZX4A49Y8b5+lsdiyDujTyJtCoV5Rxl4eO:J8+SVtsgy6jTKthV5RH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6

File Explorer

d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6

.exe 275KB

d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6

IMPHASH 259a6e708819808bcdd9e3fe675c29a3
SHA256 d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6
MD5 ee8940bc2a47d26bdcd3347815f03117
SHA1 22a02bf284ea145bba0535dd33c48214995e71d5
SHA512 eed51379e48cfb13f7ed48b4e2d47951f6c6ed49841b18ba3b92d0f5872f741d201ea539de9542f4333276a8c54672bd60505ab57d89bc3f1f54caade02e126c
SSDEEP 6144:J4t+SZX4A49Y8b5+lsdiyDujTyJtCoV5Rxl4eO:J8+SVtsgy6jTKthV5RH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5693

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SystemTimeToTzSpecificLocalTime HeapAlloc SystemTimeToFileTime MoveFileExW InterlockedDecrement CreateDirectoryW GetUserDefaultLCID GetComputerNameW GetConsoleAliasesLengthA GetLocaleInfoW FatalAppExitW GetTapePosition ReplaceFileW LocalHandle GetTimeZoneInformation ReleaseSemaphore GetConsoleOutputCP GetStdHandle GetCurrentDirectoryW WriteConsoleOutputCharacterA CreateNamedPipeA CreateTimerQueueTimer SetStdHandle LoadLibraryA LocalAlloc AddAtomA lstrcatW FreeEnvironmentStringsW VirtualProtect GetFileTime FindAtomW SetFileAttributesW GetVolumeInformationW CreateFileW WriteConsoleW SetFilePointer GetStringTypeW GetConsoleAliasExesLengthA GetProcessIoCounters DebugActiveProcessStop SetLastError GetLocaleInfoA GetLastError HeapFree EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate Sleep HeapSize GetProcAddress GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection CloseHandle WriteFile GetModuleFileNameW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc LoadLibraryW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar

user32

SetKeyboardState CreateIcon GetClassLongA SetActiveWindow

gdi32

GetBoundsRect

advapi32

OpenThreadToken GetAce

Sharing

General

Malware Config

Signatures

File Explorer

d02a1d9bb677dba25254aaac415b8f43e91d0bee4d3a26748c61f87fc5b3ada6

kernel32

user32

gdi32

advapi32

generic