3da1050ed63df3de66a6d6e84557993f51579d0f0880c88759ef8aaf6cfc4917

General

Target
3da1050ed63df3de66a6d6e84557993f51579d0f0880c88759ef8aaf6cfc4917
Size 769KB
Sample240418-hy7jpaed22
SHA256 3da1050ed63df3de66a6d6e84557993f51579d0f0880c88759ef8aaf6cfc4917
MD5 65b49650da8fa3a0f2fa914c06caf91d
SHA1 c15c0b6d02093a96bb2407e0f54ba7c3a95168f2
SHA512 f45f8c777dab501dffdbbf60e65a0cebab2eafbf8b62932a69e2aaded7d89e1dea6d7a0613de71eb172026c8046ca1c0051489f1e74e1ca30dba8d9456e854fe
SSDEEP 12288:eaO9YVihD1AeFbzhmcw3J4/yCDLBcW1V+KMhEmkZJWW:KZ1Rhmc++5NIK/ZJW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da1050ed63df3de66a6d6e84557993f51579d0f0880c88759ef8aaf6cfc4917

File Explorer

3da1050ed63df3de66a6d6e84557993f51579d0f0880c88759ef8aaf6cfc4917

.exe 769KB

3da1050ed63df3de66a6d6e84557993f51579d0f0880c88759ef8aaf6cfc4917

IMPHASH 96d5e40a6f183914c8bf0374fa1144d1
SHA256 3da1050ed63df3de66a6d6e84557993f51579d0f0880c88759ef8aaf6cfc4917
MD5 65b49650da8fa3a0f2fa914c06caf91d
SHA1 c15c0b6d02093a96bb2407e0f54ba7c3a95168f2
SHA512 f45f8c777dab501dffdbbf60e65a0cebab2eafbf8b62932a69e2aaded7d89e1dea6d7a0613de71eb172026c8046ca1c0051489f1e74e1ca30dba8d9456e854fe
SSDEEP 12288:eaO9YVihD1AeFbzhmcw3J4/yCDLBcW1V+KMhEmkZJWW:KZ1Rhmc++5NIK/ZJW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW GetConsoleAliasesLengthW GetLocaleInfoA GetConsoleAliasExesLengthA EnumCalendarInfoW SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetComputerNameW LockFile FreeEnvironmentStringsA GetModuleHandleW IsBadReadPtr EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW FindNextVolumeW GetAtomNameW SetConsoleTitleA GetProcAddress GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode BuildCommDCBW LoadLibraryA SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA BuildCommDCBA VirtualProtect GetCurrentDirectoryA SetCalendarInfoA FindAtomW LocalFileTimeToFileTime GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

3da1050ed63df3de66a6d6e84557993f51579d0f0880c88759ef8aaf6cfc4917

kernel32

generic