fa38bc50e82c0b00890b3234017ee1c0446f48114e700717f69d12dfb5c7d043

General

Target
fa38bc50e82c0b00890b3234017ee1c0446f48114e700717f69d12dfb5c7d043
Size 347KB
Sample240502-asm9vsbe8t
SHA256 fa38bc50e82c0b00890b3234017ee1c0446f48114e700717f69d12dfb5c7d043
MD5 5ec61087c62b7253d45b72e19c096b5f
SHA1 90658f4eec68c48a2764acdd86d4ebf8757a27d3
SHA512 71c3071214ac76f9a98c9a86eeb9234c28630a44d533714b85dce8867641de18db7283d4995bfd773434f03646fcd1ab3b79e65ad0210d79c9a5e4f670ca736a
SSDEEP 6144:8o+4WgjZb/JFOtrrcQfDowFsTPgZvaRGbmDgAsWrJhUN5m8BO:5ZjZb/JfQboRTAvaYykBAfF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa38bc50e82c0b00890b3234017ee1c0446f48114e700717f69d12dfb5c7d043

File Explorer

fa38bc50e82c0b00890b3234017ee1c0446f48114e700717f69d12dfb5c7d043

.exe 347KB

fa38bc50e82c0b00890b3234017ee1c0446f48114e700717f69d12dfb5c7d043

IMPHASH 2f726f40370b375fa05d60fc38904442
SHA256 fa38bc50e82c0b00890b3234017ee1c0446f48114e700717f69d12dfb5c7d043
MD5 5ec61087c62b7253d45b72e19c096b5f
SHA1 90658f4eec68c48a2764acdd86d4ebf8757a27d3
SHA512 71c3071214ac76f9a98c9a86eeb9234c28630a44d533714b85dce8867641de18db7283d4995bfd773434f03646fcd1ab3b79e65ad0210d79c9a5e4f670ca736a
SSDEEP 6144:8o+4WgjZb/JFOtrrcQfDowFsTPgZvaRGbmDgAsWrJhUN5m8BO:5ZjZb/JfQboRTAvaYykBAfF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFirmwareEnvironmentVariableA GetModuleHandleW GetProcessHeap ReadConsoleW GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW GetProcAddress GetLocaleInfoA SetFileAttributesA LoadLibraryA SetConsoleCtrlHandler SetConsoleDisplayMode SetCurrentDirectoryW SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA ScrollConsoleScreenBufferA FindAtomW SetStdHandle EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

fa38bc50e82c0b00890b3234017ee1c0446f48114e700717f69d12dfb5c7d043

kernel32

advapi32

generic