68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9

General

Target
68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9
Size 222KB
Sample240501-29b2pscb35
SHA256 68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9
MD5 bdf4f4c6fd2011a7de032a5b9be5aae9
SHA1 2a3eea3f0f773018f883602bfda21ffd37f28b1e
SHA512 4f72d40e6533c2f656fced65ba190451155b22019862a0fbb91e3069bb104e692a85ba40efb1a3712e46270c20d0ada48330a42e3746d73a917a1369d77c6f69
SSDEEP 3072:vz72zjy9g72urLJsyw7utXmXCExCqd17RhGB5KPHdX5Elx:Oy9glFsyuu8yETZPGmPHbg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9

File Explorer

68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9

.exe 222KB

68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9

IMPHASH ecaec964738e0d632998678ce4e20365
SHA256 68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9
MD5 bdf4f4c6fd2011a7de032a5b9be5aae9
SHA1 2a3eea3f0f773018f883602bfda21ffd37f28b1e
SHA512 4f72d40e6533c2f656fced65ba190451155b22019862a0fbb91e3069bb104e692a85ba40efb1a3712e46270c20d0ada48330a42e3746d73a917a1369d77c6f69
SSDEEP 3072:vz72zjy9g72urLJsyw7utXmXCExCqd17RhGB5KPHdX5Elx:Oy9glFsyuu8yETZPGmPHbg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetProcessHeap GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW SetConsoleTitleA GlobalUnfix EnumCalendarInfoW GetProcAddress SetFirmwareEnvironmentVariableW LoadLibraryA GetFileType SetConsoleDisplayMode FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW SetCurrentDirectoryA GetLocaleInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9

kernel32

advapi32

generic