a1834bdd140fffb6f5132e298e8e8afeafa66c8e58f9b45d319d075b6198c563

General

Target
a1834bdd140fffb6f5132e298e8e8afeafa66c8e58f9b45d319d075b6198c563
Size 281KB
Sample240313-1tfjhscc95
SHA256 a1834bdd140fffb6f5132e298e8e8afeafa66c8e58f9b45d319d075b6198c563
MD5 4f5441dc226ef0dd830dbc15fc2bd94f
SHA1 01619dbdeee63be5b9a15c25d156893e8cb84917
SHA512 7d1672da612b79bd0d0527448f9a5810ad3901bd62f71a3a6c9b9a82e440d5026d49ae4ddef0aeb4e431a50ad3fa10fb24e021da08d13a34eb507218125776c8
SSDEEP 3072:WP+rpgJyUmp9+AbKNuiQ6QUwAmxCHV3X2oszmFvv45uMhX0Hc:+xJLmjiQ6VwAYAV3X2QxBMXU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1834bdd140fffb6f5132e298e8e8afeafa66c8e58f9b45d319d075b6198c563

File Explorer

a1834bdd140fffb6f5132e298e8e8afeafa66c8e58f9b45d319d075b6198c563

.exe 281KB

a1834bdd140fffb6f5132e298e8e8afeafa66c8e58f9b45d319d075b6198c563

IMPHASH 21974fb3227aadac39bf384d44afc473
SHA256 a1834bdd140fffb6f5132e298e8e8afeafa66c8e58f9b45d319d075b6198c563
MD5 4f5441dc226ef0dd830dbc15fc2bd94f
SHA1 01619dbdeee63be5b9a15c25d156893e8cb84917
SHA512 7d1672da612b79bd0d0527448f9a5810ad3901bd62f71a3a6c9b9a82e440d5026d49ae4ddef0aeb4e431a50ad3fa10fb24e021da08d13a34eb507218125776c8
SSDEEP 3072:WP+rpgJyUmp9+AbKNuiQ6QUwAmxCHV3X2oszmFvv45uMhX0Hc:+xJLmjiQ6VwAYAV3X2QxBMXU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

39856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAlloc GetCurrentProcessId GetExitCodeThread GetLastError SetHandleInformation GetTickCount OpenMutexW LoadLibraryA GetModuleFileNameA SetEnvironmentVariableA FindResourceW GlobalFindAtomA GetWindowsDirectoryW GetCurrentDirectoryA CreateDirectoryA RemoveDirectoryA GetProcAddress GetFileAttributesExA GetVolumeInformationA GetVersionExA FindNextVolumeMountPointA GetLocaleInfoW GetNumberFormatA EnumTimeFormatsA ReadConsoleInputA AttachConsole ReadConsoleW WriteConsoleW AddConsoleAliasW GetConsoleAliasesLengthA GetConsoleAliasExesLengthA SetEndOfFile CloseHandle SetFilePointerEx SetStdHandle GetStringTypeW CreateFileW EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapAlloc RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapFree HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetProcessHeap FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType GetCurrentThreadId QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW HeapReAlloc OutputDebugStringW ReadFile

user32

CharUpperBuffW GetClassInfoA LoadKeyboardLayoutA CharLowerA

gdi32

SetTextColor

Sharing

General

Malware Config

Signatures

File Explorer

a1834bdd140fffb6f5132e298e8e8afeafa66c8e58f9b45d319d075b6198c563

kernel32

user32

gdi32

generic