b11b550fccddee0f9652cb34c12f91c0

General

Target
b11b550fccddee0f9652cb34c12f91c0
Size 180KB
Sample240304-d1nr5she37
SHA256 fd58afa96d56df9d4bb20955601fc4b7e379b9964eccf31cb1904252f709dbc7
MD5 b11b550fccddee0f9652cb34c12f91c0
SHA1 0dd1703f8971981781f07b931547a07ea2d3a420
SHA512 612e823b664f77b50e751ff1e2a4964fd110685583ff51af3e1875fc74a228a47539e0ddbc584c3558c88eab2bc32807e8cd533878bcbc2519b1554e6abe9496
SSDEEP 3072:nLKj98VzeJcm/ujPBN4SpORcoWJfPsV98Q5NGSfPH+:nLPUdOJzloWdPsViQGSHe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b11b550fccddee0f9652cb34c12f91c0

File Explorer

b11b550fccddee0f9652cb34c12f91c0

.exe 180KB

b11b550fccddee0f9652cb34c12f91c0

IMPHASH 6b22ece31495fe337ab5b098b4e30ca3
SHA256 fd58afa96d56df9d4bb20955601fc4b7e379b9964eccf31cb1904252f709dbc7
MD5 b11b550fccddee0f9652cb34c12f91c0
SHA1 0dd1703f8971981781f07b931547a07ea2d3a420
SHA512 612e823b664f77b50e751ff1e2a4964fd110685583ff51af3e1875fc74a228a47539e0ddbc584c3558c88eab2bc32807e8cd533878bcbc2519b1554e6abe9496
SSDEEP 3072:nLKj98VzeJcm/ujPBN4SpORcoWJfPsV98Q5NGSfPH+:nLPUdOJzloWdPsViQGSHe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7324

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dot.pdb

kernel32

EnumDateFormatsExW MoveFileExA EndUpdateResourceW InterlockedIncrement InterlockedDecrement ReadConsoleOutputAttribute GetSystemWindowsDirectoryW GetEnvironmentStringsW GetUserDefaultLCID WaitForSingleObject SetConsoleScreenBufferSize GetComputerNameW SetEvent GetConsoleAliasesLengthA CreateActCtxW GetConsoleCP LocalShrink ReadConsoleOutputW GetVersionExW GetFileAttributesA lstrcpynW GetConsoleAliasW VerifyVersionInfoA WriteConsoleW WritePrivateProfileSectionW IsBadWritePtr ReadFile GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA CreateFileW lstrcatA GetACP GetVolumePathNameA lstrlenW SetConsoleTitleA VerifyVersionInfoW InterlockedExchange GetLastError GetProcAddress EnterCriticalSection GetLocalTime GetProcessId LocalAlloc SetCalendarInfoW DnsHostnameToComputerNameA CreateTapePartition SetConsoleDisplayMode SetFileApisToANSI GlobalGetAtomNameW SetEnvironmentVariableA GetModuleHandleA UpdateResourceW CancelTimerQueueTimer GetConsoleTitleW BuildCommDCBA VirtualProtect PeekConsoleInputA FindFirstVolumeW GetSystemDefaultLangID GetStartupInfoW HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException TerminateProcess GetCurrentProcess IsDebuggerPresent LeaveCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW HeapSize

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

b11b550fccddee0f9652cb34c12f91c0

kernel32

user32

generic