95911f6247275f4a7d99df7eae40d2f8d8e2a4895b068b6ee7f5fef7ea4cc6c8

General

Target
95911f6247275f4a7d99df7eae40d2f8d8e2a4895b068b6ee7f5fef7ea4cc6c8
Size 769KB
Sample240422-qsdnesbh87
SHA256 95911f6247275f4a7d99df7eae40d2f8d8e2a4895b068b6ee7f5fef7ea4cc6c8
MD5 4f3d7a54e7cf3afc6c0168f50446b7a6
SHA1 74fdd17f8900c604533a81a38279f455d6aa0f2c
SHA512 49938de767964aec924a084bba143122a1dcd4245a5aefcf0f0e135f11c3cd0258d80edf1e71043cad383a07113c265a8afab8525a162426ff47784accffee6a
SSDEEP 12288:m+lPeKQtNecwI4LSzEhz/UFB+W1MCqk1hDkUUkJPX/5s9FL:m+lstNNwtLkE98FB+W6Cn/tWFL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95911f6247275f4a7d99df7eae40d2f8d8e2a4895b068b6ee7f5fef7ea4cc6c8

File Explorer

95911f6247275f4a7d99df7eae40d2f8d8e2a4895b068b6ee7f5fef7ea4cc6c8

.exe 769KB

95911f6247275f4a7d99df7eae40d2f8d8e2a4895b068b6ee7f5fef7ea4cc6c8

IMPHASH 12f7de8a3c68b276aca25710ff68730e
SHA256 95911f6247275f4a7d99df7eae40d2f8d8e2a4895b068b6ee7f5fef7ea4cc6c8
MD5 4f3d7a54e7cf3afc6c0168f50446b7a6
SHA1 74fdd17f8900c604533a81a38279f455d6aa0f2c
SHA512 49938de767964aec924a084bba143122a1dcd4245a5aefcf0f0e135f11c3cd0258d80edf1e71043cad383a07113c265a8afab8525a162426ff47784accffee6a
SSDEEP 12288:m+lPeKQtNecwI4LSzEhz/UFB+W1MCqk1hDkUUkJPX/5s9FL:m+lstNNwtLkE98FB+W6Cn/tWFL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFirmwareEnvironmentVariableA GetComputerNameW UnlockFile GetModuleHandleW GetConsoleAliasesLengthA GetDateFormatA SetCommState GlobalAlloc LoadLibraryW IsValidLocale GetConsoleAliasExesLengthW HeapCreate FindNextVolumeW IsBadWritePtr GlobalUnfix GetProcAddress GetLocaleInfoA SetFileAttributesA LoadLibraryA SetCalendarInfoW GetFileType SetConsoleDisplayMode SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW GetVolumeInformationW LocalFileTimeToFileTime GetProcessHeaps EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

95911f6247275f4a7d99df7eae40d2f8d8e2a4895b068b6ee7f5fef7ea4cc6c8

kernel32

advapi32

generic