b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42

General

Target
b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42
Size 269KB
Sample240410-qs8hssce7x
SHA256 b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42
MD5 e640bdb76d7b30cb9ca9250d5b6631e3
SHA1 0540792efa9eb7ecdcfce3340dc0be1204c1e8c8
SHA512 0d9bbc8f82a212cbb92595f2d5e7e4e1bab00061286f04441dce4c383827e3d55a60afee4e1d52b2af4ded201c5c54c046a4065ca055cfa1448b807a4a4a2034
SSDEEP 3072:HWFdp+IajKk//6uu3icJ3QJiLK4DBOigIjbeirMnUMdE5R+l:2FdpH4KVd3bneIjbekMn9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42

File Explorer

b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42

.exe 269KB

b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42

IMPHASH 7d860b0a7df364272a9fb37beae9b685
SHA256 b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42
MD5 e640bdb76d7b30cb9ca9250d5b6631e3
SHA1 0540792efa9eb7ecdcfce3340dc0be1204c1e8c8
SHA512 0d9bbc8f82a212cbb92595f2d5e7e4e1bab00061286f04441dce4c383827e3d55a60afee4e1d52b2af4ded201c5c54c046a4065ca055cfa1448b807a4a4a2034
SSDEEP 3072:HWFdp+IajKk//6uu3icJ3QJiLK4DBOigIjbeirMnUMdE5R+l:2FdpH4KVd3bneIjbekMn9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleExA SetLocalTime WriteConsoleOutputCharacterA LoadResource SystemTimeToTzSpecificLocalTime LoadLibraryExW GetCurrentProcess InitializeSListHead CreateJobObjectW GlobalLock CancelWaitableTimer GetConsoleAliasesA SetFileTime GetCompressedFileSizeW FindResourceExA GlobalAlloc LoadLibraryW GetLocaleInfoW GetSystemPowerStatus SetSystemTimeAdjustment GetExitCodeProcess Beep GetFileAttributesW EnumDateFormatsExW GetCompressedFileSizeA GetEnvironmentVariableA CompareStringW DisconnectNamedPipe SetLastError GetProcAddress HeapSize GlobalFree GetTempFileNameA OpenWaitableTimerA GetAtomNameA OpenWaitableTimerW VirtualLock GetCommMask AddAtomA GlobalFindAtomW GetModuleFileNameA SetConsoleCursorInfo GlobalUnWire lstrcatW GetCurrentDirectoryA EnumCalendarInfoExA LCMapStringW RemoveVectoredExceptionHandler SetTimeZoneInformation HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapFree EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread DeleteCriticalSection FatalAppExitA HeapCreate HeapDestroy VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale FlushFileBuffers ReadFile SetEndOfFile GetProcessHeap GetTimeZoneInformation CompareStringA SetEnvironmentVariableA GetModuleHandleA

advapi32

IsTextUnicode RegCreateKeyA

Sharing

General

Malware Config

Signatures

File Explorer

b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42

kernel32

advapi32

generic