be7fdfefa6dac04e9183e54a76fdca06fb8bf501381ce0d0fe9a227f452a20fc

General

Target
be7fdfefa6dac04e9183e54a76fdca06fb8bf501381ce0d0fe9a227f452a20fc
Size 719KB
Sample240402-xpmv9aae87
SHA256 be7fdfefa6dac04e9183e54a76fdca06fb8bf501381ce0d0fe9a227f452a20fc
MD5 14d420d8a346ae5e59617598540e607d
SHA1 5f3667055fd5db1b7a26e349447c10de88fa697e
SHA512 18ff9a47dd7a004531e59fb6d35b974a6a61e499fca3258b5d370d943f3dc81c8c85c9fb8ec120d87faadad1c9628c34d0fce6f20c00b843ef7a57bc38a010ed
SSDEEP 12288:d1Wu6AuFD1zL/5IBDHeFjaqpB9VuLIs08bYB14wwVwBQPKGx5HDW/r0w3QD:bWndLuh+RaqNV3sBqwVwBxGx5CD0w3Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be7fdfefa6dac04e9183e54a76fdca06fb8bf501381ce0d0fe9a227f452a20fc

File Explorer

be7fdfefa6dac04e9183e54a76fdca06fb8bf501381ce0d0fe9a227f452a20fc

.exe 719KB

be7fdfefa6dac04e9183e54a76fdca06fb8bf501381ce0d0fe9a227f452a20fc

IMPHASH eb67be19b81b44ee5931ef078192d536
SHA256 be7fdfefa6dac04e9183e54a76fdca06fb8bf501381ce0d0fe9a227f452a20fc
MD5 14d420d8a346ae5e59617598540e607d
SHA1 5f3667055fd5db1b7a26e349447c10de88fa697e
SHA512 18ff9a47dd7a004531e59fb6d35b974a6a61e499fca3258b5d370d943f3dc81c8c85c9fb8ec120d87faadad1c9628c34d0fce6f20c00b843ef7a57bc38a010ed
SSDEEP 12288:d1Wu6AuFD1zL/5IBDHeFjaqpB9VuLIs08bYB14wwVwBQPKGx5HDW/r0w3QD:bWndLuh+RaqNV3sBqwVwBxGx5CD0w3Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW CreateFileA GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA HeapAlloc InterlockedIncrement HeapFree CreateHardLinkA ConnectNamedPipe GetModuleHandleW FindNextVolumeMountPointA ReadConsoleOutputA GetUserDefaultLangID GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW lstrcpynW GetAtomNameW LocalHandle SetConsoleTitleA WritePrivateProfileStringW GetThreadLocale GetProcAddress GetLongPathNameA SetComputerNameA SetCalendarInfoW SetConsoleDisplayMode GlobalFindAtomW GetModuleFileNameA HeapSetInformation VirtualProtect GetCurrentDirectoryA DeleteCriticalSection FindAtomW GetSystemTime SetFileAttributesW CreateFileW EncodePointer DecodePointer ExitProcess GetCommandLineW GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapReAlloc SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers ReadFile CloseHandle

user32

GetMonitorInfoW CopyRect LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

be7fdfefa6dac04e9183e54a76fdca06fb8bf501381ce0d0fe9a227f452a20fc

kernel32

user32

generic