ad9b251b3d3d8a38fb99d90964109e65

Sharing

Copy URL Twitter E-mail

General

Target
ad9b251b3d3d8a38fb99d90964109e65
Size 96KB
Sample240229-ecgvcscf5s
SHA256 eb740005273c087baf42b0c3a49a7c5b7225256681106c72567db92fc2048ada
MD5 ad9b251b3d3d8a38fb99d90964109e65
SHA1 3020fe2707fbe986fc9577c7d6e7ae94cb2213b2
SHA512 a419d268857830ae6f5f090fcce65fae0d70cbd82295413bd9226e9e4f631f5ab62be24df4098f3103cfe8a85f868cd464744026696ab1433d6763c493f17558
SSDEEP 1536:FkcgYgbig9EhjWNMSTdwp++lx/ynQ4uYF/9kcgYgbig9EhjWNMSTdwp++lxT:Fj8ijWNw++lf4Pzj8ijWNw++lN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad9b251b3d3d8a38fb99d90964109e65

File Explorer

ad9b251b3d3d8a38fb99d90964109e65

.exe 96KB

ad9b251b3d3d8a38fb99d90964109e65

IMPHASH 03cae632c46883e0fd8e744440cd27c0
SHA256 eb740005273c087baf42b0c3a49a7c5b7225256681106c72567db92fc2048ada
MD5 ad9b251b3d3d8a38fb99d90964109e65
SHA1 3020fe2707fbe986fc9577c7d6e7ae94cb2213b2
SHA512 a419d268857830ae6f5f090fcce65fae0d70cbd82295413bd9226e9e4f631f5ab62be24df4098f3103cfe8a85f868cd464744026696ab1433d6763c493f17558
SSDEEP 1536:FkcgYgbig9EhjWNMSTdwp++lx/ynQ4uYF/9kcgYgbig9EhjWNMSTdwp++lxT:Fj8ijWNw++lf4Pzj8ijWNw++lN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11924

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

mpr

WNetEnumResourceW WNetUseConnectionW WNetOpenEnumW WNetCloseEnum

ws2_32

ioctlsocket getpeername ntohl select WSAGetLastError htons recv socket closesocket getsockopt WSAAddressToStringW htonl connect

iphlpapi

GetIpAddrTable

winhttp

WinHttpReceiveResponse WinHttpOpenRequest WinHttpConnect WinHttpCloseHandle WinHttpOpen WinHttpSendRequest

kernel32

SystemTimeToFileTime QueryPerformanceCounter GetLocalTime ReadProcessMemory FindNextFileW SetFileAttributesW MoveFileW GetFileSizeEx GetFileAttributesW SetFilePointerEx SetEndOfFile ExitProcess SetFilePointer WaitForSingleObject GetComputerNameW SetEvent GetLogicalDrives GetTickCount Sleep CopyFileW ReadFile CreateFileW MultiByteToWideChar CreateEventW WaitForMultipleObjects CloseHandle CreateThread InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection ResetEvent DeleteCriticalSection AllocConsole WriteFile WideCharToMultiByte WriteConsoleW GetStdHandle CreateMutexW CreateProcessW GetCurrentProcess SetHandleInformation OpenProcess GetLocaleInfoW FindClose TerminateProcess GetModuleFileNameW FlushFileBuffers OpenMutexW GetLastError GetProcAddress Process32FirstW GetExitCodeThread CreatePipe Process32NextW GetModuleHandleA CreateToolhelp32Snapshot ReleaseMutex GetVersion DeleteFileW GetCurrentProcessId GetVolumeInformationW ExpandEnvironmentStringsW HeapAlloc GetProcessHeap HeapReAlloc HeapFree FindFirstFileW GetCurrentThreadId

user32

GetWindowThreadProcessId GetShellWindow

advapi32

FreeSid LookupPrivilegeValueW OpenProcessToken GetTokenInformation EqualSid RegSetValueExW RegCloseKey AdjustTokenPrivileges RegOpenKeyExW LookupAccountSidW AllocateAndInitializeSid DuplicateTokenEx RegQueryValueExW

shell32

ShellExecuteExW

ole32

CoGetObject CoInitializeEx CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

ad9b251b3d3d8a38fb99d90964109e65

mpr

ws2_32

iphlpapi

winhttp

kernel32

user32

advapi32

shell32

ole32

generic