2681471baeceb69f2e29a2fc459bec0eee6e504a712f622381ece1e27a46ab8e

General

Target
2681471baeceb69f2e29a2fc459bec0eee6e504a712f622381ece1e27a46ab8e
Size 204KB
Sample240328-2alf4aab3x
SHA256 2681471baeceb69f2e29a2fc459bec0eee6e504a712f622381ece1e27a46ab8e
MD5 2e26bcebc1a078cddea125cb99bdb67b
SHA1 91fc87e42041003b7f9557c867390a19e5ac0038
SHA512 472f272b0d3f045ced8044ab62d78ad168b164b32f756c7a86acdb79ad5c235862e6aa2053dface4cdd00dc7b33f19415274cf0ae1b0ac80027afbc8af4941f6
SSDEEP 6144:I9cignejiKknSBpyacFQavugjiUaAJlu:wgneFkSBpylFQavRji6l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2681471baeceb69f2e29a2fc459bec0eee6e504a712f622381ece1e27a46ab8e

File Explorer

2681471baeceb69f2e29a2fc459bec0eee6e504a712f622381ece1e27a46ab8e

.exe 204KB

2681471baeceb69f2e29a2fc459bec0eee6e504a712f622381ece1e27a46ab8e

IMPHASH 409ffc0f497d7a8c723e7952b781d4dc
SHA256 2681471baeceb69f2e29a2fc459bec0eee6e504a712f622381ece1e27a46ab8e
MD5 2e26bcebc1a078cddea125cb99bdb67b
SHA1 91fc87e42041003b7f9557c867390a19e5ac0038
SHA512 472f272b0d3f045ced8044ab62d78ad168b164b32f756c7a86acdb79ad5c235862e6aa2053dface4cdd00dc7b33f19415274cf0ae1b0ac80027afbc8af4941f6
SSDEEP 6144:I9cignejiKknSBpyacFQavugjiUaAJlu:wgneFkSBpylFQavRji6l
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9863

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA TryEnterCriticalSection GetNumaProcessorNode DebugActiveProcessStop GetConsoleAliasExesLengthA SetUnhandledExceptionFilter InterlockedIncrement HeapFree WaitForSingleObject SetComputerNameW ConnectNamedPipe GetModuleHandleW GetTickCount ReadConsoleOutputA LoadLibraryW GetLocaleInfoW GetFileAttributesA HeapCreate lstrcpynW GetAtomNameW FindNextVolumeMountPointW SetConsoleTitleA GetConsoleOutputCP GetLastError GetLongPathNameW GetThreadLocale GetProcAddress CreateHardLinkW FindAtomA GlobalFindAtomW SetSystemTime SetConsoleTitleW HeapSetInformation GetCurrentDirectoryA SetCalendarInfoA FindAtomW CreateFileW ReadFile FlushFileBuffers HeapReAlloc GetStringTypeW HeapAlloc GetCommandLineA GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind MultiByteToWideChar HeapSize SetStdHandle WriteConsoleW LCMapStringW CloseHandle

user32

CopyRect GetMonitorInfoW LoadIconW

ole32

CoTaskMemFree

winhttp

WinHttpAddRequestHeaders WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

2681471baeceb69f2e29a2fc459bec0eee6e504a712f622381ece1e27a46ab8e

kernel32

user32

ole32

winhttp

generic