1ae200e82b9aef7a5fd139c3616a9edb3fbddcc5c141ca46dc9eaf9731d6977e

General

Target
1ae200e82b9aef7a5fd139c3616a9edb3fbddcc5c141ca46dc9eaf9731d6977e
Size 66KB
Sample240305-ws6bbsdc7z
SHA256 1ae200e82b9aef7a5fd139c3616a9edb3fbddcc5c141ca46dc9eaf9731d6977e
MD5 a1eaf444c878f5ec907488be3a7ef337
SHA1 44ddbf7aa256a4b0e25de585e95ea520bf2c4891
SHA512 bed3539072aecf53536223d0037cfcabc4444eacab7a8982d4f4579386e087eba18ebd499d86b8f02f9f4925be1b888f5bb2e57b7cbbb4ec0172d4967c39c78b
SSDEEP 1536:x+7Di6BjpuTibOYk9+uVxxC72H2MYk28yqv6lP:g7DDBjpuT6OYeTxgY4f8yqv6J
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ae200e82b9aef7a5fd139c3616a9edb3fbddcc5c141ca46dc9eaf9731d6977e

File Explorer

1ae200e82b9aef7a5fd139c3616a9edb3fbddcc5c141ca46dc9eaf9731d6977e

.dll 66KB

1ae200e82b9aef7a5fd139c3616a9edb3fbddcc5c141ca46dc9eaf9731d6977e

IMPHASH 9222c920f7fa24ac5355ea1056779797
SHA256 1ae200e82b9aef7a5fd139c3616a9edb3fbddcc5c141ca46dc9eaf9731d6977e
MD5 a1eaf444c878f5ec907488be3a7ef337
SHA1 44ddbf7aa256a4b0e25de585e95ea520bf2c4891
SHA512 bed3539072aecf53536223d0037cfcabc4444eacab7a8982d4f4579386e087eba18ebd499d86b8f02f9f4925be1b888f5bb2e57b7cbbb4ec0172d4967c39c78b
SSDEEP 1536:x+7Di6BjpuTibOYk9+uVxxC72H2MYk28yqv6lP:g7DDBjpuT6OYeTxgY4f8yqv6J
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

10520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

PeekNamedPipe ConnectNamedPipe WriteFile ReadFile DisconnectNamedPipe FlushFileBuffers GetLastError CreateNamedPipeA SetNamedPipeHandleState CloseHandle InitializeCriticalSection Sleep LeaveCriticalSection EnterCriticalSection CreateThread lstrlenA WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW GetConsoleMode GetConsoleCP SetFilePointer HeapReAlloc MultiByteToWideChar IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryW HeapFree HeapAlloc EncodePointer DecodePointer GetSystemTimeAsFileTime GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation GetVersion HeapCreate HeapDestroy GetProcAddress GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW HeapSize RtlUnwindEx RaiseException RtlPcToFileHeader FlsGetValue FlsFree SetLastError FlsAlloc SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId CreateFileW

user32

wsprintfA

ws2_32

inet_addr WSAGetLastError htons socket connect gethostbyname send WSAStartup shutdown recv closesocket

Sharing

General

Malware Config

Signatures

File Explorer

1ae200e82b9aef7a5fd139c3616a9edb3fbddcc5c141ca46dc9eaf9731d6977e

kernel32

user32

ws2_32

generic