d16898490cf1dd2143853a265bb48307e12e34fa6b0d6b707f2f979d141f7b58

General

Target
d16898490cf1dd2143853a265bb48307e12e34fa6b0d6b707f2f979d141f7b58
Size 769KB
Sample240418-fbcdxscf4v
SHA256 d16898490cf1dd2143853a265bb48307e12e34fa6b0d6b707f2f979d141f7b58
MD5 6459fe61bb80f410124323f87958e226
SHA1 1d6a695a3baf3cd60304796a0217dd59fc18dd3c
SHA512 3e84edd29bef7534ca399dd9e221330e961b3fa51eb18551a6993f430c34eca346a10cd5563b521f169ca6345b2d7092b47ae9752d9b0265fed41ec119b93e6c
SSDEEP 12288:E7j4h+DEdzqkBlubmTzQNHtgZKS79sgO86y8YnYatm6CaSJ:ph+DO4mXaHtFKO86yDYqC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d16898490cf1dd2143853a265bb48307e12e34fa6b0d6b707f2f979d141f7b58

File Explorer

d16898490cf1dd2143853a265bb48307e12e34fa6b0d6b707f2f979d141f7b58

.exe 769KB

d16898490cf1dd2143853a265bb48307e12e34fa6b0d6b707f2f979d141f7b58

IMPHASH 96d5e40a6f183914c8bf0374fa1144d1
SHA256 d16898490cf1dd2143853a265bb48307e12e34fa6b0d6b707f2f979d141f7b58
MD5 6459fe61bb80f410124323f87958e226
SHA1 1d6a695a3baf3cd60304796a0217dd59fc18dd3c
SHA512 3e84edd29bef7534ca399dd9e221330e961b3fa51eb18551a6993f430c34eca346a10cd5563b521f169ca6345b2d7092b47ae9752d9b0265fed41ec119b93e6c
SSDEEP 12288:E7j4h+DEdzqkBlubmTzQNHtgZKS79sgO86y8YnYatm6CaSJ:ph+DO4mXaHtFKO86yDYqC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW GetConsoleAliasesLengthW GetLocaleInfoA GetConsoleAliasExesLengthA EnumCalendarInfoW SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetComputerNameW LockFile FreeEnvironmentStringsA GetModuleHandleW IsBadReadPtr EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW FindNextVolumeW GetAtomNameW SetConsoleTitleA GetProcAddress GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode BuildCommDCBW LoadLibraryA SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA BuildCommDCBA VirtualProtect GetCurrentDirectoryA SetCalendarInfoA FindAtomW LocalFileTimeToFileTime GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

d16898490cf1dd2143853a265bb48307e12e34fa6b0d6b707f2f979d141f7b58

kernel32

generic