afe3d8e88524538f78ed9ba5a6199f52

General

Target
afe3d8e88524538f78ed9ba5a6199f52
Size 498KB
Sample240301-a249qshb86
SHA256 6306a84af848d10856e8dc13e9d0000d32dcaa129be195ede37eadda4cd7e3f3
MD5 afe3d8e88524538f78ed9ba5a6199f52
SHA1 3e5d65019e2a779a72c107f9c5619c13f00085bf
SHA512 1f4ab1052d6cd3c8ed4c70c13e43e20ab3d6652a89ddfa20a97639918b5dccde59911a90c3ee69aa9131fc8bb0c85a026dcb4ad9048886b3dbe0c512401f4760
SSDEEP 12288:ILPffRB7Yg1iBWgG/aeIo1qI6YGpD9FMRabhJ:ILnJB+G/aRIqvYGHFMRaNJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afe3d8e88524538f78ed9ba5a6199f52

File Explorer

afe3d8e88524538f78ed9ba5a6199f52

.exe 498KB

afe3d8e88524538f78ed9ba5a6199f52

IMPHASH 77554e5daa9478a6160428ce3abe1161
SHA256 6306a84af848d10856e8dc13e9d0000d32dcaa129be195ede37eadda4cd7e3f3
MD5 afe3d8e88524538f78ed9ba5a6199f52
SHA1 3e5d65019e2a779a72c107f9c5619c13f00085bf
SHA512 1f4ab1052d6cd3c8ed4c70c13e43e20ab3d6652a89ddfa20a97639918b5dccde59911a90c3ee69aa9131fc8bb0c85a026dcb4ad9048886b3dbe0c512401f4760
SSDEEP 12288:ILPffRB7Yg1iBWgG/aeIo1qI6YGpD9FMRabhJ:ILnJB+G/aRIqvYGHFMRaNJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\uymdt\jpxxru\lbnz\da558ff890a64f3bb5412d749e5783de\zaprnn\qnxmgmry\Release\qnxmgmry.pdb

kernel32

FindFirstFileW VirtualProtect GetFullPathNameW FindNextFileW GetStdHandle WriteFile FindClose SetFileAttributesW GetLastError lstrcatW HeapAlloc WriteConsoleW GetProcessHeap GetModuleHandleW WideCharToMultiByte GetConsoleWindow lstrcpyW lstrcmpW CloseHandle CreateFileW SetFilePointerEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode DecodePointer

user32

LoadStringW ShowWindow GrayStringW GetDC

Sharing

General

Malware Config

Signatures

File Explorer

afe3d8e88524538f78ed9ba5a6199f52

kernel32

user32

generic