dec340af99d11d4bda18bafe03b2172f

General

Target
dec340af99d11d4bda18bafe03b2172f
Size 14.9MB
Sample240326-krqcyaee75
SHA256 7d34075aebc551801edcf950ad816a5f277522f2d6b53679e7bd2921d89e0c4f
MD5 dec340af99d11d4bda18bafe03b2172f
SHA1 08712f078b5470ee9a7398c8662af4269b749da3
SHA512 4125d79a9a9f1288e8fdaf5477c47f0c6ef8c522ae639842b334847a7ed1668126ee0ff8eae59dac20808e6b64959027bb6bb811d10f2cfb43c551374bf07a1d
SSDEEP 49152:2yqI2kmso555555555555555555555555555555555555555555555555555555t:2yqI2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dec340af99d11d4bda18bafe03b2172f

File Explorer

dec340af99d11d4bda18bafe03b2172f

.exe 14.9MB

dec340af99d11d4bda18bafe03b2172f

IMPHASH c079249c95907cac766668e02cbc3207
SHA256 7d34075aebc551801edcf950ad816a5f277522f2d6b53679e7bd2921d89e0c4f
MD5 dec340af99d11d4bda18bafe03b2172f
SHA1 08712f078b5470ee9a7398c8662af4269b749da3
SHA512 4125d79a9a9f1288e8fdaf5477c47f0c6ef8c522ae639842b334847a7ed1668126ee0ff8eae59dac20808e6b64959027bb6bb811d10f2cfb43c551374bf07a1d
SSDEEP 49152:2yqI2kmso555555555555555555555555555555555555555555555555555555t:2yqI2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16498

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleExW GetModuleHandleW WriteFile GetLocaleInfoW SizeofResource SetSystemTimeAdjustment GetSystemTimeAdjustment HeapDestroy GetTimeFormatW GetFileAttributesW TerminateProcess GetAtomNameW GetTimeZoneInformation lstrcatA FindNextVolumeMountPointW ReplaceFileA VirtualUnlock GetLastError IsDBCSLeadByteEx GetProcAddress SetFileAttributesA SetMailslotInfo PrepareTape OpenWaitableTimerA UnhandledExceptionFilter SetConsoleOutputCP SetCommMask GetTapeParameters GlobalFindAtomW GetModuleHandleA GetProcessShutdownParameters LoadLibraryExA GetFileTime GetConsoleCursorInfo ScrollConsoleScreenBufferA FindAtomW FileTimeToLocalFileTime DeleteTimerQueueTimer GetCurrentProcessId LCMapStringW CompareStringW CompareStringA GetConsoleAliasA WriteConsoleOutputCharacterA SetEndOfFile DisableThreadLibraryCalls HeapCompact GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage FatalAppExitA VirtualAlloc HeapReAlloc MultiByteToWideChar CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale FlushFileBuffers ReadFile GetProcessHeap SetEnvironmentVariableA

user32

GetDesktopWindow

advapi32

AbortSystemShutdownW IsValidSid BackupEventLogA ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

dec340af99d11d4bda18bafe03b2172f

kernel32

user32

advapi32

generic