2124fdfc40815a967c8a0507b6fbf20fdc9e8228a8b423765d94f199d1d41de9

General

Target
2124fdfc40815a967c8a0507b6fbf20fdc9e8228a8b423765d94f199d1d41de9
Size 824KB
Sample240418-2cfnmage79
SHA256 2124fdfc40815a967c8a0507b6fbf20fdc9e8228a8b423765d94f199d1d41de9
MD5 c2047bd4712dbdf7a739d8b22241811f
SHA1 b78586af9be60cd6b0fe623712f66103095b9c1c
SHA512 e012aeeddc3f3e3625a1c9be98d8d5685c1a7d058e24baac042586530f70f8e322ef379add1b8f9bf45983e8ae00fd32063723f6dc62606fb9a0374f4fe67d8b
SSDEEP 12288:FVMCLhjDhO4tNxoup4STnHQERPMwMfpqe2agSkFJh4f4wOCpt6Kk:F/LhvxfTnwERPM9fpqnagSK/4CCPnk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2124fdfc40815a967c8a0507b6fbf20fdc9e8228a8b423765d94f199d1d41de9

File Explorer

2124fdfc40815a967c8a0507b6fbf20fdc9e8228a8b423765d94f199d1d41de9

.exe 824KB

2124fdfc40815a967c8a0507b6fbf20fdc9e8228a8b423765d94f199d1d41de9

IMPHASH 331af798bb33bd4e783ea7c89c6d7b97
SHA256 2124fdfc40815a967c8a0507b6fbf20fdc9e8228a8b423765d94f199d1d41de9
MD5 c2047bd4712dbdf7a739d8b22241811f
SHA1 b78586af9be60cd6b0fe623712f66103095b9c1c
SHA512 e012aeeddc3f3e3625a1c9be98d8d5685c1a7d058e24baac042586530f70f8e322ef379add1b8f9bf45983e8ae00fd32063723f6dc62606fb9a0374f4fe67d8b
SSDEEP 12288:FVMCLhjDhO4tNxoup4STnHQERPMwMfpqe2agSkFJh4f4wOCpt6Kk:F/LhvxfTnwERPM9fpqnagSK/4CCPnk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6447

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA EnumCalendarInfoA GetConsoleAliasesLengthW VirtualQuery HeapFree GetComputerNameW UnlockFile WaitForSingleObjectEx GetModuleHandleW GetProcessHeap GetDateFormatA EnumTimeFormatsW SetCommState GlobalAlloc LoadLibraryW IsValidLocale GetLocaleInfoW IsBadWritePtr GetAtomNameW FindNextVolumeMountPointW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW GetProcAddress BuildCommDCBW LoadLibraryA GetModuleFileNameA FreeEnvironmentStringsW BuildCommDCBA VirtualProtect SetCalendarInfoA FileTimeToLocalFileTime HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

2124fdfc40815a967c8a0507b6fbf20fdc9e8228a8b423765d94f199d1d41de9

kernel32

generic