db71af3de6defd78079e2f6df4fdd4b2f514473ab470e2bb18d98143d3eeef08

General

Target
db71af3de6defd78079e2f6df4fdd4b2f514473ab470e2bb18d98143d3eeef08
Size 81KB
Sample240415-d7kztsdf64
SHA256 db71af3de6defd78079e2f6df4fdd4b2f514473ab470e2bb18d98143d3eeef08
MD5 9d7ee05f595f20d820c93d4c8131ae55
SHA1 c63b05c42ac1ebd1761c17936990192feae0287c
SHA512 6a2c2c509ac6313dbda83a35b8e15b0704b1f76aff4375b64ab7867a21da8c3097377029bf1f167c3b8bed261f6f42127de6c7a5a029492786556f4e16b6d031
SSDEEP 1536:EByXv7uWGEqXZKXTadSp7Lxw9zzBPw+NASUSFOj8sWHcdF6+eXq8Wq:xv4JKXTx71wnArSsXFpeXq8Wq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db71af3de6defd78079e2f6df4fdd4b2f514473ab470e2bb18d98143d3eeef08

File Explorer

db71af3de6defd78079e2f6df4fdd4b2f514473ab470e2bb18d98143d3eeef08

.dll 81KB

db71af3de6defd78079e2f6df4fdd4b2f514473ab470e2bb18d98143d3eeef08

IMPHASH 0986ee100b9277b4d1503d41cc8367e7
SHA256 db71af3de6defd78079e2f6df4fdd4b2f514473ab470e2bb18d98143d3eeef08
MD5 9d7ee05f595f20d820c93d4c8131ae55
SHA1 c63b05c42ac1ebd1761c17936990192feae0287c
SHA512 6a2c2c509ac6313dbda83a35b8e15b0704b1f76aff4375b64ab7867a21da8c3097377029bf1f167c3b8bed261f6f42127de6c7a5a029492786556f4e16b6d031
SSDEEP 1536:EByXv7uWGEqXZKXTadSp7Lxw9zzBPw+NASUSFOj8sWHcdF6+eXq8Wq:xv4JKXTx71wnArSsXFpeXq8Wq
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

HeapFree GetCurrentProcess CreateMutexA LocalAlloc Sleep GetLastError CreateFileA LoadLibraryA CloseHandle K32GetModuleInformation VirtualProtect VirtualAllocEx LocalFree GetFileSize ExitProcess ReadProcessMemory GetProcessHeap FreeLibrary K32EnumProcessModules GetComputerNameA WriteConsoleW WriteProcessMemory GetModuleFileNameA HeapAlloc ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW EncodePointer RaiseException GetModuleHandleExW GetModuleFileNameW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

db71af3de6defd78079e2f6df4fdd4b2f514473ab470e2bb18d98143d3eeef08

kernel32

generic