7b3d377ca2f6f9ea48265a80355fe6dc622a9b4b43855a9ddec7eb5e4666a1d4

General

Target
7b3d377ca2f6f9ea48265a80355fe6dc622a9b4b43855a9ddec7eb5e4666a1d4
Size 242KB
Sample240410-pal2eafa67
SHA256 7b3d377ca2f6f9ea48265a80355fe6dc622a9b4b43855a9ddec7eb5e4666a1d4
MD5 67b8f4bb9c81aca61abf8d49640a85b9
SHA1 fbf00a827bf1a44340a1e4bb1698285b27dab56c
SHA512 81cf99cc0561cff8efa04cb583e437d9c1d9d6f6ba50845fb404a6d120bb87302093a9b464662f1201341914421ea887f5d78d20a5c480491b82999d12608d98
SSDEEP 3072:YFwP8VUgQInIb1gL8ed0HbJoyZP0EUvKqdeJiIg5KMHDrDjQ0E2AjBwHX50CqEZk:YqPsQWIb+LLd0RD2KqUsPQ0EjV7lQbg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b3d377ca2f6f9ea48265a80355fe6dc622a9b4b43855a9ddec7eb5e4666a1d4

File Explorer

7b3d377ca2f6f9ea48265a80355fe6dc622a9b4b43855a9ddec7eb5e4666a1d4

.exe 242KB

7b3d377ca2f6f9ea48265a80355fe6dc622a9b4b43855a9ddec7eb5e4666a1d4

IMPHASH 0c1de0d2a8383c4df108890e036a0ae1
SHA256 7b3d377ca2f6f9ea48265a80355fe6dc622a9b4b43855a9ddec7eb5e4666a1d4
MD5 67b8f4bb9c81aca61abf8d49640a85b9
SHA1 fbf00a827bf1a44340a1e4bb1698285b27dab56c
SHA512 81cf99cc0561cff8efa04cb583e437d9c1d9d6f6ba50845fb404a6d120bb87302093a9b464662f1201341914421ea887f5d78d20a5c480491b82999d12608d98
SSDEEP 3072:YFwP8VUgQInIb1gL8ed0HbJoyZP0EUvKqdeJiIg5KMHDrDjQ0E2AjBwHX50CqEZk:YqPsQWIb+LLd0RD2KqUsPQ0EjV7lQbg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW FindResourceExW FindResourceW SetWaitableTimer InterlockedIncrement SetConsoleTextAttribute GetCurrentProcess GetModuleHandleExW SetConsoleScreenBufferSize SetTapeParameters GetModuleHandleW SetFileTime TzSpecificLocalTimeToSystemTime GlobalFindAtomA GetLocaleInfoW SizeofResource SetSystemTimeAdjustment GetFileAttributesA GetConsoleAliasW TerminateProcess FileTimeToSystemTime GetCompressedFileSizeA GetTimeZoneInformation GlobalUnlock DisconnectNamedPipe LCMapStringA GetConsoleOutputCP GetLastError GetProcAddress SetFileAttributesA GetAtomNameA OpenWaitableTimerW LocalAlloc GlobalUnWire lstrcatW VirtualProtect FindAtomW LocalFree lstrcpyW GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle CreateFileA FlushFileBuffers LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale ReadFile SetStdHandle WriteConsoleA WriteConsoleW SetEndOfFile GetProcessHeap CompareStringA CompareStringW SetEnvironmentVariableA

Name

.text

Size

181KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.piniham

Size

512B

Virtual Size

1B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.new

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7b3d377ca2f6f9ea48265a80355fe6dc622a9b4b43855a9ddec7eb5e4666a1d4

kernel32

generic