c69be34ab41565847dfaa5fe2fe10aea

General

Target
c69be34ab41565847dfaa5fe2fe10aea
Size 850KB
Sample240313-xerrfscg4y
SHA256 b09035766d93ad0b6e6c4565c7ef9eafc3d8506c29f6a0c3b9103aa2e8527463
MD5 c69be34ab41565847dfaa5fe2fe10aea
SHA1 f0d0b194dbd7997abd36e7de023c5b4b50043dbb
SHA512 6f2624ce0691fe71e65935d003eeb836144a7ed0fa13b6d268b2e3a324db0ade0b1a98517072f0c092955cdbceda07fb0fd7d6c8bd92db01e02213bd1aa3a5c5
SSDEEP 12288:Z1Wl8TpYMxskWv6Df4TnTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTPTTTTE:ZAGF0ykTmqtkein5Dm5g
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c69be34ab41565847dfaa5fe2fe10aea

File Explorer

c69be34ab41565847dfaa5fe2fe10aea

.exe 850KB

c69be34ab41565847dfaa5fe2fe10aea

IMPHASH 49be0836dac021f86af2cb207b4613c8
SHA256 b09035766d93ad0b6e6c4565c7ef9eafc3d8506c29f6a0c3b9103aa2e8527463
MD5 c69be34ab41565847dfaa5fe2fe10aea
SHA1 f0d0b194dbd7997abd36e7de023c5b4b50043dbb
SHA512 6f2624ce0691fe71e65935d003eeb836144a7ed0fa13b6d268b2e3a324db0ade0b1a98517072f0c092955cdbceda07fb0fd7d6c8bd92db01e02213bd1aa3a5c5
SSDEEP 12288:Z1Wl8TpYMxskWv6Df4TnTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTPTTTTE:ZAGF0ykTmqtkein5Dm5g
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

134730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OutputDebugStringW FormatMessageW VirtualProtect HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileSizeEx SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetProcessHeap WriteFile ExitProcess HeapReAlloc HeapFree HeapAlloc WriteConsoleW GetModuleHandleExW GetModuleFileNameW GetFileType GetStdHandle LoadLibraryExW WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetCPInfo CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary CreateFileW

user32

GrayStringA GetDC TranslateMessage DispatchMessageW PeekMessageW DefWindowProcW PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW ShowWindow SetCapture ReleaseCapture LoadImageW LoadCursorW SetWindowLongW GetWindowLongW AdjustWindowRect UpdateWindow

d3d11

D3D11CreateDeviceAndSwapChain

gdiplus

GdiplusStartup GdiplusShutdown

Sharing

General

Malware Config

Signatures

File Explorer

c69be34ab41565847dfaa5fe2fe10aea

kernel32

user32

d3d11

gdiplus

generic