b329a7e386d9dbb5ea4aa1045838efde

Sharing

Copy URL Twitter E-mail

General

Target
b329a7e386d9dbb5ea4aa1045838efde
Size 110KB
Sample240304-1fysyaeb9s
SHA256 e4d723a183dd610a24b67ca31723e272543db95ddb509655b79138db3760b619
MD5 b329a7e386d9dbb5ea4aa1045838efde
SHA1 982c35a2ee125285612d60bdcfa36dd7e6879d4e
SHA512 d7da4b446d9b89ca6d9c584db4478d6e699b198d5471a2c501a3cc799186707d86d9f5bcec2d0b164f06c96dedfb7d4505c4a91e47dde21e43f4b0af1de5f1ed
SSDEEP 3072:UR2+IQnQlc/HPYQ3mjU1wCEV2UcJI7lFfxEu/c:e2+/nD/HP/hwC1IrZ/c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b329a7e386d9dbb5ea4aa1045838efde

File Explorer

b329a7e386d9dbb5ea4aa1045838efde

.exe 110KB

b329a7e386d9dbb5ea4aa1045838efde

IMPHASH ecf90b7d37d389305ba466136ba79e39
SHA256 e4d723a183dd610a24b67ca31723e272543db95ddb509655b79138db3760b619
MD5 b329a7e386d9dbb5ea4aa1045838efde
SHA1 982c35a2ee125285612d60bdcfa36dd7e6879d4e
SHA512 d7da4b446d9b89ca6d9c584db4478d6e699b198d5471a2c501a3cc799186707d86d9f5bcec2d0b164f06c96dedfb7d4505c4a91e47dde21e43f4b0af1de5f1ed
SSDEEP 3072:UR2+IQnQlc/HPYQ3mjU1wCEV2UcJI7lFfxEu/c:e2+/nD/HP/hwC1IrZ/c
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

dwtrig20.pdb

advapi32

RegCloseKey RegSetValueExW RegCreateKeyExW RegDeleteKeyW RegEnumKeyExW RegOpenKeyExW RegQueryValueExA RegOpenKeyExA FreeSid CheckTokenMembership AllocateAndInitializeSid RegEnumValueW RegQueryInfoKeyW RegQueryValueExW ConvertSidToStringSidA ConvertStringSecurityDescriptorToSecurityDescriptorW GetSecurityDescriptorDacl InitializeSecurityDescriptor SetSecurityDescriptorDacl OpenThreadToken OpenProcessToken GetTokenInformation CopySid IsValidSid InitializeAcl AddAccessDeniedAce AddAccessAllowedAce GetLengthSid

kernel32

EnterCriticalSection LoadLibraryA InterlockedExchange FreeLibrary GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetCurrentThread LocalAlloc LocalFree GetModuleFileNameA GetShortPathNameA OpenMutexA CreateMutexA GetCurrentProcess GetModuleHandleA GetProcAddress MultiByteToWideChar Sleep GlobalAlloc GlobalFree CreateProcessW CloseHandle GetShortPathNameW GetLongPathNameW lstrcmpiW GetSystemWindowsDirectoryW GetLastError GetFileAttributesW WaitForSingleObject GetModuleFileNameW CreateEventW lstrlenW InterlockedDecrement SetEvent InterlockedIncrement RaiseException LeaveCriticalSection SetLastError VirtualFree VirtualAlloc InitializeCriticalSectionAndSpinCount TlsAlloc GetSystemDefaultLCID TlsFree DeleteCriticalSection TlsSetValue TlsGetValue

msvcrt

_wtol _except_handler3 memmove _exit _XcptFilter _cexit exit __p___winitenv _amsg_exit __wgetmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type __dllonexit _onexit _controlfp _c_exit

ole32

CoTaskMemFree CoInitializeEx CoRegisterClassObject StringFromCLSID StringFromIID CoCreateInstance CoUninitialize CoRevokeClassObject

oleaut32

SysAllocString SysFreeString LoadRegTypeLi LoadTypeLi

shell32

SHGetSpecialFolderPathW

user32

SystemParametersInfoW

Sharing

General

Malware Config

Signatures

File Explorer

b329a7e386d9dbb5ea4aa1045838efde

advapi32

kernel32

msvcrt

ole32

oleaut32

shell32

user32

generic