b6e2076df632176577b7c6ef14ac599f662479346633a91d4f6360303163da22

General

Target
b6e2076df632176577b7c6ef14ac599f662479346633a91d4f6360303163da22
Size 706KB
Sample240424-297hlsbd79
SHA256 b6e2076df632176577b7c6ef14ac599f662479346633a91d4f6360303163da22
MD5 f48e9b9d447f68e47e16839e7518b2d4
SHA1 8973130000daf9051270641ec78d1116a4f17a48
SHA512 a62c9da0aaabcc6b7509ca97e489d4a4bf5401168d9246041be20f97dd004b515f993d68f6050ccbb81c0063a9d688c9bee42f73e79ed360b70a9f38f7f199d3
SSDEEP 12288:nWiB+teGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhz:nWiBkt/sBlDqgZQd6XKtiMJYiPUz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6e2076df632176577b7c6ef14ac599f662479346633a91d4f6360303163da22

File Explorer

b6e2076df632176577b7c6ef14ac599f662479346633a91d4f6360303163da22

.exe 706KB

b6e2076df632176577b7c6ef14ac599f662479346633a91d4f6360303163da22

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 b6e2076df632176577b7c6ef14ac599f662479346633a91d4f6360303163da22
MD5 f48e9b9d447f68e47e16839e7518b2d4
SHA1 8973130000daf9051270641ec78d1116a4f17a48
SHA512 a62c9da0aaabcc6b7509ca97e489d4a4bf5401168d9246041be20f97dd004b515f993d68f6050ccbb81c0063a9d688c9bee42f73e79ed360b70a9f38f7f199d3
SSDEEP 12288:nWiB+teGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhz:nWiBkt/sBlDqgZQd6XKtiMJYiPUz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

b6e2076df632176577b7c6ef14ac599f662479346633a91d4f6360303163da22

advapi32

kernel32

shell32

user32

shlwapi

generic