99aabd4ea7ba74c3e24b12388207c29d5bf352c7c0150b6f5dabf2166a1facac

General

Target
99aabd4ea7ba74c3e24b12388207c29d5bf352c7c0150b6f5dabf2166a1facac
Size 712KB
Sample240501-fg9llsae52
SHA256 99aabd4ea7ba74c3e24b12388207c29d5bf352c7c0150b6f5dabf2166a1facac
MD5 5c01df397d0733f2be4d5a7c55429db7
SHA1 9fcdc973fe2ed02d2952c54787683724ed66a24e
SHA512 aa3803b130694097487a0a5e73e9d2151f1e25bdc2960009a1d18cf98c1c68c37d26f232253c1bd24448fa0a7450b1fe2c5156b9d4b2fcca0f2e0eacce80cdaa
SSDEEP 12288:v3zaB9AoomYixKkSY0k0XgvYjxTJcCavWAH:2AoomxS1IYFTJ5auA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99aabd4ea7ba74c3e24b12388207c29d5bf352c7c0150b6f5dabf2166a1facac

File Explorer

99aabd4ea7ba74c3e24b12388207c29d5bf352c7c0150b6f5dabf2166a1facac

.exe 712KB

99aabd4ea7ba74c3e24b12388207c29d5bf352c7c0150b6f5dabf2166a1facac

IMPHASH e175dea1ca7a75d5c46592ac474caea6
SHA256 99aabd4ea7ba74c3e24b12388207c29d5bf352c7c0150b6f5dabf2166a1facac
MD5 5c01df397d0733f2be4d5a7c55429db7
SHA1 9fcdc973fe2ed02d2952c54787683724ed66a24e
SHA512 aa3803b130694097487a0a5e73e9d2151f1e25bdc2960009a1d18cf98c1c68c37d26f232253c1bd24448fa0a7450b1fe2c5156b9d4b2fcca0f2e0eacce80cdaa
SSDEEP 12288:v3zaB9AoomYixKkSY0k0XgvYjxTJcCavWAH:2AoomxS1IYFTJ5auA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetDateFormatA GetSystemTimes GetVolumeInformationA IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW GetModuleFileNameW SetConsoleTitleA SetCurrentDirectoryA FindFirstFileExA GetCurrentDirectoryW EnumCalendarInfoW GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetConsoleCtrlHandler WaitForMultipleObjects FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW FindAtomW GetSystemTime GetProcAddress GetLocaleInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

99aabd4ea7ba74c3e24b12388207c29d5bf352c7c0150b6f5dabf2166a1facac

kernel32

advapi32

generic