dd07c0651265d797ac87119e2c284c5a106e88fa27a2fc8e9e00c16107c183bc

General

Target
dd07c0651265d797ac87119e2c284c5a106e88fa27a2fc8e9e00c16107c183bc
Size 285KB
Sample240404-2zckgsde73
SHA256 dd07c0651265d797ac87119e2c284c5a106e88fa27a2fc8e9e00c16107c183bc
MD5 2e7b9c3df70793545422d52a1607a8bb
SHA1 8cd17b17e8f571ae3fa1e612cb0848514a42fa78
SHA512 c07049510a2a74828b8617cb87d6fb6517871b990c7b1bfbe2374d89461d4fa09583071b53cc9ddf8ed912d2baa1dd6208aa415b005f705405c9b4f16171c7ba
SSDEEP 6144:ZH8t5OrC0RWXC+4s1r+h+qV4y0O9HUk8X:atsrCUWS+7YV4/Bk8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd07c0651265d797ac87119e2c284c5a106e88fa27a2fc8e9e00c16107c183bc

File Explorer

dd07c0651265d797ac87119e2c284c5a106e88fa27a2fc8e9e00c16107c183bc

.exe 285KB

dd07c0651265d797ac87119e2c284c5a106e88fa27a2fc8e9e00c16107c183bc

IMPHASH 6d5eeabd05a631cd60475afb15e842d9
SHA256 dd07c0651265d797ac87119e2c284c5a106e88fa27a2fc8e9e00c16107c183bc
MD5 2e7b9c3df70793545422d52a1607a8bb
SHA1 8cd17b17e8f571ae3fa1e612cb0848514a42fa78
SHA512 c07049510a2a74828b8617cb87d6fb6517871b990c7b1bfbe2374d89461d4fa09583071b53cc9ddf8ed912d2baa1dd6208aa415b005f705405c9b4f16171c7ba
SSDEEP 6144:ZH8t5OrC0RWXC+4s1r+h+qV4y0O9HUk8X:atsrCUWS+7YV4/Bk8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapReAlloc HeapCompact GetConsoleAliasesLengthW HeapFree SetComputerNameW GetModuleHandleW GetUserDefaultLangID GlobalAlloc LoadLibraryW GetLocaleInfoW GetConsoleAliasExesLengthW WriteConsoleOutputA SetConsoleCP GetTapePosition GetAtomNameW CreateFileW SetConsoleTitleA WritePrivateProfileStringW GetDateFormatW GetProcAddress GetLongPathNameA LoadLibraryA SetCalendarInfoW CreateHardLinkW HeapWalk FindAtomA GlobalFindAtomW CreatePipe GetModuleFileNameA FindFirstVolumeMountPointA GetCurrentDirectoryA DeleteCriticalSection SetFileAttributesW SetFilePointer WriteConsoleW CloseHandle GetThreadLocale LocalUnlock HeapAlloc ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetStdHandle

user32

GetMonitorInfoW LoadIconA

advapi32

GetAce

Sharing

General

Malware Config

Signatures

File Explorer

dd07c0651265d797ac87119e2c284c5a106e88fa27a2fc8e9e00c16107c183bc

kernel32

user32

advapi32

generic