fbc93d8d0eda6efd4ab55b387f1b1a3dda0730c6e06deeb5666f8b7ec8e6b1db

General

Target
fbc93d8d0eda6efd4ab55b387f1b1a3dda0730c6e06deeb5666f8b7ec8e6b1db
Size 749KB
Sample240427-e5t1dsbh3v
SHA256 fbc93d8d0eda6efd4ab55b387f1b1a3dda0730c6e06deeb5666f8b7ec8e6b1db
MD5 405fa82f7609788bd9f49c648001b9c2
SHA1 9e92fa5a7be663de0f9cc23564b372ffd118ae8a
SHA512 4a0ab8aca553761b176a840d0c554565e8803b5baf54d9eba7c9f4c34f3c34080c6b692db281058c9a73956d3400c52de67fedb925e58cf0aa0d87e5cf882e4e
SSDEEP 12288:oi5Qtbw7yGJV9KjAn8+fbXD6UkrW6qZzriEPnVDJoxufR4z8tCQSW:oi26yaPbXDkKZCsDJoxuJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbc93d8d0eda6efd4ab55b387f1b1a3dda0730c6e06deeb5666f8b7ec8e6b1db

File Explorer

fbc93d8d0eda6efd4ab55b387f1b1a3dda0730c6e06deeb5666f8b7ec8e6b1db

.exe 749KB

fbc93d8d0eda6efd4ab55b387f1b1a3dda0730c6e06deeb5666f8b7ec8e6b1db

IMPHASH beb202dd53259913fbf6174ffc4f9ac2
SHA256 fbc93d8d0eda6efd4ab55b387f1b1a3dda0730c6e06deeb5666f8b7ec8e6b1db
MD5 405fa82f7609788bd9f49c648001b9c2
SHA1 9e92fa5a7be663de0f9cc23564b372ffd118ae8a
SHA512 4a0ab8aca553761b176a840d0c554565e8803b5baf54d9eba7c9f4c34f3c34080c6b692db281058c9a73956d3400c52de67fedb925e58cf0aa0d87e5cf882e4e
SSDEEP 12288:oi5Qtbw7yGJV9KjAn8+fbXD6UkrW6qZzriEPnVDJoxufR4z8tCQSW:oi26yaPbXDkKZCsDJoxuJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFirmwareEnvironmentVariableA GetModuleHandleW GetProcessHeap GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW SetConsoleTitleA GlobalUnfix GetLocaleInfoA GetProcAddress SetStdHandle SetFileAttributesA LoadLibraryA SetConsoleDisplayMode FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA ScrollConsoleScreenBufferA FindAtomW FileTimeToLocalFileTime SetCurrentDirectoryA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

fbc93d8d0eda6efd4ab55b387f1b1a3dda0730c6e06deeb5666f8b7ec8e6b1db

kernel32

advapi32

generic