81d6a303a9d91a48f4bee8faa608610cfdc6bd07e0fed7f561adb04fabc7a770

General

Target
81d6a303a9d91a48f4bee8faa608610cfdc6bd07e0fed7f561adb04fabc7a770
Size 716KB
Sample240403-yp5lqsbe83
SHA256 81d6a303a9d91a48f4bee8faa608610cfdc6bd07e0fed7f561adb04fabc7a770
MD5 06d6918e58280275afa47252a5c95f73
SHA1 ef87fddf898fe473215c759db3ff0403f409713d
SHA512 12147303926d9e2994f16df46e7bed28de6e50c985ad57035f32ee32f1df091464be3c91c5d20c0aa8e3b9fba9ef9a989d575b9f235e2a4fb6d460909eafb85f
SSDEEP 12288:Y3P/aK2vB+eFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHM5:Y/CKABH8NDFKYmKOF0zr31JwAlcR3QCx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81d6a303a9d91a48f4bee8faa608610cfdc6bd07e0fed7f561adb04fabc7a770

File Explorer

81d6a303a9d91a48f4bee8faa608610cfdc6bd07e0fed7f561adb04fabc7a770

.exe 716KB

81d6a303a9d91a48f4bee8faa608610cfdc6bd07e0fed7f561adb04fabc7a770

IMPHASH b696542cade53789c2cbed09ce287013
SHA256 81d6a303a9d91a48f4bee8faa608610cfdc6bd07e0fed7f561adb04fabc7a770
MD5 06d6918e58280275afa47252a5c95f73
SHA1 ef87fddf898fe473215c759db3ff0403f409713d
SHA512 12147303926d9e2994f16df46e7bed28de6e50c985ad57035f32ee32f1df091464be3c91c5d20c0aa8e3b9fba9ef9a989d575b9f235e2a4fb6d460909eafb85f
SSDEEP 12288:Y3P/aK2vB+eFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHM5:Y/CKABH8NDFKYmKOF0zr31JwAlcR3QCx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

30034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EncodePointer ExitProcess GetModuleHandleExW GetStdHandle WriteFile FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetFileType WriteConsoleW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

81d6a303a9d91a48f4bee8faa608610cfdc6bd07e0fed7f561adb04fabc7a770

advapi32

kernel32

shell32

user32

shlwapi

generic