56790b203489173c981bb6484f779c80ce952823b94959a864d079acb9ffce27

General

Target
56790b203489173c981bb6484f779c80ce952823b94959a864d079acb9ffce27
Size 164KB
Sample240228-ff72dsbe94
SHA256 56790b203489173c981bb6484f779c80ce952823b94959a864d079acb9ffce27
MD5 8c08c43f5b1e2f98fd4dd3d4c4398735
SHA1 188e4a7b6dec6ca9db1a04f31d610c5c400b4cbc
SHA512 a2f20becd04713396d78b296c76e710c0590ac9d61dc01743059cfddf2071184bfa158c84b70dd3d84d6459f84671b7418e543166b8d08d67fe8342089e0bb62
SSDEEP 3072:VrQ3f7CCQDou9jpaSMlw2oUEhTO8xq4OJf148:VruWCQsulpBb1UEhK8xqJn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56790b203489173c981bb6484f779c80ce952823b94959a864d079acb9ffce27

File Explorer

56790b203489173c981bb6484f779c80ce952823b94959a864d079acb9ffce27

.exe 164KB

56790b203489173c981bb6484f779c80ce952823b94959a864d079acb9ffce27

IMPHASH d18a17df2dd2cbbcb831b31c6fe01dcb
SHA256 56790b203489173c981bb6484f779c80ce952823b94959a864d079acb9ffce27
MD5 8c08c43f5b1e2f98fd4dd3d4c4398735
SHA1 188e4a7b6dec6ca9db1a04f31d610c5c400b4cbc
SHA512 a2f20becd04713396d78b296c76e710c0590ac9d61dc01743059cfddf2071184bfa158c84b70dd3d84d6459f84671b7418e543166b8d08d67fe8342089e0bb62
SSDEEP 3072:VrQ3f7CCQDou9jpaSMlw2oUEhTO8xq4OJf148:VruWCQsulpBb1UEhK8xqJn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5693

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MoveFileExW InterlockedDecrement CreateDirectoryW GetUserDefaultLCID GetComputerNameW CreateNamedPipeW GetConsoleAliasesLengthA GetLocaleInfoW FatalAppExitW HeapCreate GetTapePosition ReplaceFileW LocalHandle GetTimeZoneInformation ReleaseSemaphore GetConsoleOutputCP GetProcessIoCounters GetCurrentDirectoryW SetLastError CreateTimerQueueTimer SetStdHandle SetFileAttributesA LoadLibraryA LocalAlloc AddAtomA lstrcatW VirtualProtect EnumDateFormatsW GetFileTime FindAtomW GetVolumeInformationW CreateFileW WriteConsoleW SetFilePointer GetConsoleAliasExesLengthA GetStdHandle DebugActiveProcessStop GetStringTypeW MultiByteToWideChar GetLastError HeapFree EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapAlloc Sleep HeapSize GetProcAddress GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection CloseHandle WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc LoadLibraryW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW

user32

SetActiveWindow SetKeyboardState CreateIcon GetClassLongA

advapi32

OpenThreadToken GetAce

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

56790b203489173c981bb6484f779c80ce952823b94959a864d079acb9ffce27

kernel32

user32

advapi32

ole32

generic