44b5b769c9448bb97a0508f2962a94fab4ccefd17ba58c41070585ff26e9f870

General

Target
44b5b769c9448bb97a0508f2962a94fab4ccefd17ba58c41070585ff26e9f870
Size 478KB
Sample240407-2fkrragd7s
SHA256 44b5b769c9448bb97a0508f2962a94fab4ccefd17ba58c41070585ff26e9f870
MD5 244c0b1da07e69e0bec4202300511ad5
SHA1 b172066268e31d07b929db6a3afa14d300416a43
SHA512 dd5f88833bb5d159cfd7f6baeef5b2f26f8955119cf541236f69e3b132563ee5deb4ee531f3fb852d26034eb4294e4c3b7f3d1188c7930ff7122258414444415
SSDEEP 12288:gOP8W4WCijCGpPVr7/Is7Yp/4UIAR2eCbVfuU:gOyW5jnFYi3JhfuU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b5b769c9448bb97a0508f2962a94fab4ccefd17ba58c41070585ff26e9f870

File Explorer

44b5b769c9448bb97a0508f2962a94fab4ccefd17ba58c41070585ff26e9f870

.exe 478KB

44b5b769c9448bb97a0508f2962a94fab4ccefd17ba58c41070585ff26e9f870

IMPHASH 9b59fefe51f9320ef06302fa1d57096f
SHA256 44b5b769c9448bb97a0508f2962a94fab4ccefd17ba58c41070585ff26e9f870
MD5 244c0b1da07e69e0bec4202300511ad5
SHA1 b172066268e31d07b929db6a3afa14d300416a43
SHA512 dd5f88833bb5d159cfd7f6baeef5b2f26f8955119cf541236f69e3b132563ee5deb4ee531f3fb852d26034eb4294e4c3b7f3d1188c7930ff7122258414444415
SSDEEP 12288:gOP8W4WCijCGpPVr7/Is7Yp/4UIAR2eCbVfuU:gOyW5jnFYi3JhfuU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA IsBadHugeReadPtr GetCommState SetDefaultCommConfigW HeapFree GetComputerNameW LockFile ConnectNamedPipe GetModuleHandleW GetDateFormatA GetConsoleCP GlobalAlloc VirtualFreeEx LoadLibraryW GetConsoleAliasExesLengthW GetConsoleAliasesLengthW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetProcAddress FindVolumeMountPointClose LoadLibraryA HeapWalk GetModuleFileNameA FindFirstVolumeMountPointA FreeEnvironmentStringsW DeleteCriticalSection SetCalendarInfoA CloseHandle CreateFileW EnumCalendarInfoA GetAtomNameW HeapReAlloc HeapAlloc ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetLastError IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind HeapSize SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW FlushFileBuffers

user32

LoadIconA

advapi32

RegCreateKeyA ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

44b5b769c9448bb97a0508f2962a94fab4ccefd17ba58c41070585ff26e9f870

kernel32

user32

advapi32

generic