be91111bb1e1de2451c5b71d3c8632b229c01322ea81715d30f4ba49b955ff4f

General

Target
be91111bb1e1de2451c5b71d3c8632b229c01322ea81715d30f4ba49b955ff4f
Size 395KB
Sample240426-endbbahg8t
SHA256 be91111bb1e1de2451c5b71d3c8632b229c01322ea81715d30f4ba49b955ff4f
MD5 1636f66b20c18c5a2922f5b5515e43ce
SHA1 bf99312b4f3ee07395e7596d7089e301a21f437c
SHA512 8c133187e2a57096a856e8006bd2f2066eb7566686abf8c17cf81a6a9ed08abd1cec620c4ba15bf6f846d6d2b8f076bfcf068eba64b9fdb839831affa63091ea
SSDEEP 6144:tJCwBabC3kBgaI2oQGIbxBlzI6V3EKOyepROs4MPF:tJTs9gaIpQp1/zI6EKOyepRO0F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be91111bb1e1de2451c5b71d3c8632b229c01322ea81715d30f4ba49b955ff4f

File Explorer

be91111bb1e1de2451c5b71d3c8632b229c01322ea81715d30f4ba49b955ff4f

.exe 395KB

be91111bb1e1de2451c5b71d3c8632b229c01322ea81715d30f4ba49b955ff4f

IMPHASH ecaec964738e0d632998678ce4e20365
SHA256 be91111bb1e1de2451c5b71d3c8632b229c01322ea81715d30f4ba49b955ff4f
MD5 1636f66b20c18c5a2922f5b5515e43ce
SHA1 bf99312b4f3ee07395e7596d7089e301a21f437c
SHA512 8c133187e2a57096a856e8006bd2f2066eb7566686abf8c17cf81a6a9ed08abd1cec620c4ba15bf6f846d6d2b8f076bfcf068eba64b9fdb839831affa63091ea
SSDEEP 6144:tJCwBabC3kBgaI2oQGIbxBlzI6V3EKOyepROs4MPF:tJTs9gaIpQp1/zI6EKOyepRO0F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetProcessHeap GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW SetConsoleTitleA GlobalUnfix EnumCalendarInfoW GetProcAddress SetFirmwareEnvironmentVariableW LoadLibraryA GetFileType SetConsoleDisplayMode FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW SetCurrentDirectoryA GetLocaleInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

be91111bb1e1de2451c5b71d3c8632b229c01322ea81715d30f4ba49b955ff4f

kernel32

advapi32

generic