ca9d00594aa601821c0e1d1fc20dc66cac593718b33a1ee6d51076f6f44f2fcb

General

Target
ca9d00594aa601821c0e1d1fc20dc66cac593718b33a1ee6d51076f6f44f2fcb
Size 81KB
Sample240423-ef3k8scf9v
SHA256 ca9d00594aa601821c0e1d1fc20dc66cac593718b33a1ee6d51076f6f44f2fcb
MD5 d2d35e0ecd79676d572991083d954fc6
SHA1 b69ed91c2b59f723da92107d0afdf83508444e0a
SHA512 9badb8e8731d62a7c8450f5bb4303fc05c948458866c41b6b5c25f46d79e503746a23e059bd6bf70598f153f9774daf92b871c5a0bfb291961fc3860a990ffdb
SSDEEP 1536:NByXv7uWGEqXZKXTadSp7Lxw9zzBPw+NASUSFOj8sWHcdF6+eXq8W5:Yv4JKXTx71wnArSsXFpeXq8W5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca9d00594aa601821c0e1d1fc20dc66cac593718b33a1ee6d51076f6f44f2fcb

File Explorer

ca9d00594aa601821c0e1d1fc20dc66cac593718b33a1ee6d51076f6f44f2fcb

.dll 81KB

ca9d00594aa601821c0e1d1fc20dc66cac593718b33a1ee6d51076f6f44f2fcb

IMPHASH 0986ee100b9277b4d1503d41cc8367e7
SHA256 ca9d00594aa601821c0e1d1fc20dc66cac593718b33a1ee6d51076f6f44f2fcb
MD5 d2d35e0ecd79676d572991083d954fc6
SHA1 b69ed91c2b59f723da92107d0afdf83508444e0a
SHA512 9badb8e8731d62a7c8450f5bb4303fc05c948458866c41b6b5c25f46d79e503746a23e059bd6bf70598f153f9774daf92b871c5a0bfb291961fc3860a990ffdb
SSDEEP 1536:NByXv7uWGEqXZKXTadSp7Lxw9zzBPw+NASUSFOj8sWHcdF6+eXq8W5:Yv4JKXTx71wnArSsXFpeXq8W5
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

HeapFree GetCurrentProcess CreateMutexA LocalAlloc Sleep GetLastError CreateFileA LoadLibraryA CloseHandle K32GetModuleInformation VirtualProtect VirtualAllocEx LocalFree GetFileSize ExitProcess ReadProcessMemory GetProcessHeap FreeLibrary K32EnumProcessModules GetComputerNameA WriteConsoleW WriteProcessMemory GetModuleFileNameA HeapAlloc ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW EncodePointer RaiseException GetModuleHandleExW GetModuleFileNameW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

ca9d00594aa601821c0e1d1fc20dc66cac593718b33a1ee6d51076f6f44f2fcb

kernel32

generic