86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7

General

Target
86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7
Size 286KB
Sample240404-2ntpmada79
SHA256 86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7
MD5 ce0fbb19c12cd60d7ce803fa5795184f
SHA1 6d58532de6c591dcbe29b4cd89be83ff5af710e9
SHA512 7ff490be42f7b192676bc1e2e95229ebe3ecfc005d42934c9b524732be0f41aab71f0858d941ac9a1787d2a67670649dc9f3679253c0365272b005261069004e
SSDEEP 3072:m4b8sRmT66Mbf0izcJDGrFU88LM1yxOvoJFHrbt1YWCpBt:mg8sRm+TnmWRUOwnLz8X
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7

File Explorer

86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7

.exe 286KB

86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7

IMPHASH 0fd340d66fc088039393198f3f38c0e9
SHA256 86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7
MD5 ce0fbb19c12cd60d7ce803fa5795184f
SHA1 6d58532de6c591dcbe29b4cd89be83ff5af710e9
SHA512 7ff490be42f7b192676bc1e2e95229ebe3ecfc005d42934c9b524732be0f41aab71f0858d941ac9a1787d2a67670649dc9f3679253c0365272b005261069004e
SSDEEP 3072:m4b8sRmT66Mbf0izcJDGrFU88LM1yxOvoJFHrbt1YWCpBt:mg8sRm+TnmWRUOwnLz8X
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8767

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapReAlloc HeapCompact GetConsoleAliasesLengthW HeapFree SetComputerNameW GetModuleHandleW GetUserDefaultLangID GlobalAlloc LoadLibraryW GetLocaleInfoW GetConsoleAliasExesLengthW WriteConsoleOutputA SetConsoleCP GetTapePosition GetAtomNameW CreateFileW SetConsoleTitleA WritePrivateProfileStringW GetDateFormatW GetProcAddress GetLongPathNameA LoadLibraryA SetCalendarInfoW CreateHardLinkW HeapWalk FindAtomA GlobalFindAtomW CreatePipe GetModuleFileNameA FindFirstVolumeMountPointA GetCurrentDirectoryA DeleteCriticalSection SetFileAttributesW SetFilePointer WriteConsoleW CloseHandle GetThreadLocale LocalUnlock HeapAlloc GetLastError ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetStdHandle

user32

GetMonitorInfoW LoadIconA

advapi32

GetAce

Sharing

General

Malware Config

Signatures

File Explorer

86b7039a7dfc15406055549ccb7d3d37595427ef6f5b384c8c7f0232bd8ac0c7

kernel32

user32

advapi32

generic