3b81cf93df6e5fc0ec6c6dd23b897906df4df8b669a833a2fa748407831496db

General

Target
3b81cf93df6e5fc0ec6c6dd23b897906df4df8b669a833a2fa748407831496db
Size 357KB
Sample240501-mak31aef78
SHA256 3b81cf93df6e5fc0ec6c6dd23b897906df4df8b669a833a2fa748407831496db
MD5 a9e226e426009396e811b5447833f70f
SHA1 96cf9fcf371d332c55ef119ee8b3af8955ba2fbf
SHA512 f8b3dc52b84ed3022d0980808dac3f124ed107798ef7383d05bcd19bb2ca0456829b9014465e171829886712e0dd02989842724c3b84b0e0f658e2e15263bc66
SSDEEP 6144:Eb1oPfz7v/xnKaYwsK+R4VWFvd7qw5Q88pTrO3p4B/2rowNroQFLtNLZBINdz/:k6n/JbYyw563OKsCQFLtpDKz/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b81cf93df6e5fc0ec6c6dd23b897906df4df8b669a833a2fa748407831496db

File Explorer

3b81cf93df6e5fc0ec6c6dd23b897906df4df8b669a833a2fa748407831496db

.exe 357KB

3b81cf93df6e5fc0ec6c6dd23b897906df4df8b669a833a2fa748407831496db

IMPHASH e175dea1ca7a75d5c46592ac474caea6
SHA256 3b81cf93df6e5fc0ec6c6dd23b897906df4df8b669a833a2fa748407831496db
MD5 a9e226e426009396e811b5447833f70f
SHA1 96cf9fcf371d332c55ef119ee8b3af8955ba2fbf
SHA512 f8b3dc52b84ed3022d0980808dac3f124ed107798ef7383d05bcd19bb2ca0456829b9014465e171829886712e0dd02989842724c3b84b0e0f658e2e15263bc66
SSDEEP 6144:Eb1oPfz7v/xnKaYwsK+R4VWFvd7qw5Q88pTrO3p4B/2rowNroQFLtNLZBINdz/:k6n/JbYyw563OKsCQFLtpDKz/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetDateFormatA GetSystemTimes GetVolumeInformationA IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW GetModuleFileNameW SetConsoleTitleA SetCurrentDirectoryA FindFirstFileExA GetCurrentDirectoryW EnumCalendarInfoW GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetConsoleCtrlHandler WaitForMultipleObjects FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW FindAtomW GetSystemTime GetProcAddress GetLocaleInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

3b81cf93df6e5fc0ec6c6dd23b897906df4df8b669a833a2fa748407831496db

kernel32

advapi32

generic