d127f9abf62606037f60834e4acb08fa42420d07a51221502010a4cc8479e893

General

Target
d127f9abf62606037f60834e4acb08fa42420d07a51221502010a4cc8479e893
Size 702KB
Sample240429-x2fbyaba8x
SHA256 d127f9abf62606037f60834e4acb08fa42420d07a51221502010a4cc8479e893
MD5 164daa2e41570b1348fcf5f0b59d7ef8
SHA1 55be058a18b0c4b5eb9a0ff4bdbdf4cd092a513a
SHA512 b863804a35197dab5a56e4a1a3fa536272d1201ff0cad6192d97ee50096efb02415bcfca5e619a3e5e5c5506faf7f00b086d37d4b5833f911b52ff267660d392
SSDEEP 12288:/FnTi1nLMQs1pl0NloNnuCEH3hxsDN2p2:9nmhYDHO4NnuJHk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d127f9abf62606037f60834e4acb08fa42420d07a51221502010a4cc8479e893

File Explorer

d127f9abf62606037f60834e4acb08fa42420d07a51221502010a4cc8479e893

.exe 702KB

d127f9abf62606037f60834e4acb08fa42420d07a51221502010a4cc8479e893

IMPHASH 1679b6408c5d33ed187bba0fb99e14e0
SHA256 d127f9abf62606037f60834e4acb08fa42420d07a51221502010a4cc8479e893
MD5 164daa2e41570b1348fcf5f0b59d7ef8
SHA1 55be058a18b0c4b5eb9a0ff4bdbdf4cd092a513a
SHA512 b863804a35197dab5a56e4a1a3fa536272d1201ff0cad6192d97ee50096efb02415bcfca5e619a3e5e5c5506faf7f00b086d37d4b5833f911b52ff267660d392
SSDEEP 12288:/FnTi1nLMQs1pl0NloNnuCEH3hxsDN2p2:9nmhYDHO4NnuJHk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6181

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap GetConsoleAliasesLengthA ReadConsoleW GetDateFormatA SetCommState GetSystemTimes GetVolumeInformationA GetLocaleInfoW IsBadCodePtr lstrcpynW GetModuleFileNameW SetCurrentDirectoryA FindFirstFileExA GetModuleHandleW GetProcAddress SetFileAttributesA SetFileApisToOEM LoadLibraryA LocalAlloc SetConsoleCtrlHandler SetConsoleDisplayMode SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA FindAtomW GetCurrentDirectoryW EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

user32

GetProcessDefaultLayout

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

d127f9abf62606037f60834e4acb08fa42420d07a51221502010a4cc8479e893

kernel32

user32

advapi32

generic