34e7290bae98aa9b4a066544783a1f80cb025f66215e650ae2692c581ffe0939

General

Target
34e7290bae98aa9b4a066544783a1f80cb025f66215e650ae2692c581ffe0939
Size 824KB
Sample240418-2ffsssgf85
SHA256 34e7290bae98aa9b4a066544783a1f80cb025f66215e650ae2692c581ffe0939
MD5 2d1de5e1866c690b169ecb4010801f62
SHA1 535f658da46481e9393869b1a3c1fa42978138e0
SHA512 7ca0476a1d793aa399e9fc72a61a664912d804f171484df51112a1c734d162358219968bd135170a2043265f66eefdacf99140c54dbe6b9e030d38865a19cda8
SSDEEP 12288:TVhYKYDyW0MAPKflv90xc9f9mNH/OD5QZpZ1eYWA+JdqYNlGSrvB:ni+W7Ayh90WFIfWuZIi+jqY1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34e7290bae98aa9b4a066544783a1f80cb025f66215e650ae2692c581ffe0939

File Explorer

34e7290bae98aa9b4a066544783a1f80cb025f66215e650ae2692c581ffe0939

.exe 824KB

34e7290bae98aa9b4a066544783a1f80cb025f66215e650ae2692c581ffe0939

IMPHASH d0eb7b8c702cd1b9d76bcc539912ddcb
SHA256 34e7290bae98aa9b4a066544783a1f80cb025f66215e650ae2692c581ffe0939
MD5 2d1de5e1866c690b169ecb4010801f62
SHA1 535f658da46481e9393869b1a3c1fa42978138e0
SHA512 7ca0476a1d793aa399e9fc72a61a664912d804f171484df51112a1c734d162358219968bd135170a2043265f66eefdacf99140c54dbe6b9e030d38865a19cda8
SSDEEP 12288:TVhYKYDyW0MAPKflv90xc9f9mNH/OD5QZpZ1eYWA+JdqYNlGSrvB:ni+W7Ayh90WFIfWuZIi+jqY1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6447

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA EnumCalendarInfoA GetConsoleAliasesLengthW VirtualQuery GetCommState HeapFree GetComputerNameW UnlockFile WaitForSingleObjectEx GetModuleHandleW GetDateFormatA EnumTimeFormatsW GlobalAlloc LoadLibraryW IsValidLocale GetLocaleInfoW IsBadWritePtr GetAtomNameW FindNextVolumeMountPointW SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW GetProcAddress GetProcessHeaps BuildCommDCBW LoadLibraryA SetCalendarInfoW GetModuleFileNameA SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect FileTimeToLocalFileTime HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

LoadIconW

Sharing

General

Malware Config

Signatures

File Explorer

34e7290bae98aa9b4a066544783a1f80cb025f66215e650ae2692c581ffe0939

kernel32

user32

generic