b12e86ab39e6eb0cffbca70439fecfdc9cc7886ce4b82c8a3f1b58b7624d4816

General

Target
b12e86ab39e6eb0cffbca70439fecfdc9cc7886ce4b82c8a3f1b58b7624d4816
Size 223KB
Sample240314-ft6qgsbd2w
SHA256 b12e86ab39e6eb0cffbca70439fecfdc9cc7886ce4b82c8a3f1b58b7624d4816
MD5 89050fea76e42a1512d67a93c9ec4eb1
SHA1 4e7feba242f9dc58d7dd43a9f51da034c8e55682
SHA512 ce5aebb6e6055f4c7c2cce77d552aeff9985a5df71e59a60fad5a6b285e649e56be1ef47bec3d48e828b48bca46676e278abac0f4d76397b25128c45bbc9ceb2
SSDEEP 3072:uAODbWcMpxy4yckbzS57OVspPoUvQQCL03wvmhqfmHDtO:uBb2xgra574sZoUZCL03wvmUgt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b12e86ab39e6eb0cffbca70439fecfdc9cc7886ce4b82c8a3f1b58b7624d4816

File Explorer

b12e86ab39e6eb0cffbca70439fecfdc9cc7886ce4b82c8a3f1b58b7624d4816

.exe 223KB

b12e86ab39e6eb0cffbca70439fecfdc9cc7886ce4b82c8a3f1b58b7624d4816

IMPHASH 68a03a1ecb7cba0202a0d19a5d1b95e2
SHA256 b12e86ab39e6eb0cffbca70439fecfdc9cc7886ce4b82c8a3f1b58b7624d4816
MD5 89050fea76e42a1512d67a93c9ec4eb1
SHA1 4e7feba242f9dc58d7dd43a9f51da034c8e55682
SHA512 ce5aebb6e6055f4c7c2cce77d552aeff9985a5df71e59a60fad5a6b285e649e56be1ef47bec3d48e828b48bca46676e278abac0f4d76397b25128c45bbc9ceb2
SSDEEP 3072:uAODbWcMpxy4yckbzS57OVspPoUvQQCL03wvmhqfmHDtO:uBb2xgra574sZoUZCL03wvmUgt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5501

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCompact WriteConsoleOutputCharacterW CreateJobObjectW CreateHardLinkA FindNextVolumeMountPointA GlobalAlloc WideCharToMultiByte LoadLibraryW GetLocaleInfoW GetConsoleWindow HeapCreate GetFileAttributesW InterlockedExchange GetStdHandle FreeLibraryAndExitThread GetLastError GetCurrentDirectoryW SetComputerNameA BuildCommDCBW GetNumaHighestNodeNumber ResetEvent GetAtomNameA UnhandledExceptionFilter GetFileType ConvertDefaultLocale GetModuleFileNameA VirtualProtect ScrollConsoleScreenBufferA FindAtomW FileTimeToLocalFileTime HeapReAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EncodePointer HeapFree InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind IsProcessorFeaturePresent LCMapStringW MultiByteToWideChar GetStringTypeW RaiseException

user32

GetMonitorInfoA

Sharing

General

Malware Config

Signatures

File Explorer

b12e86ab39e6eb0cffbca70439fecfdc9cc7886ce4b82c8a3f1b58b7624d4816

kernel32

user32

generic