85d547c9dbb3ad63eaebebe44bc6846ba6854e26ca04fe33fdd6b1cde2686268

General

Target
85d547c9dbb3ad63eaebebe44bc6846ba6854e26ca04fe33fdd6b1cde2686268
Size 705KB
Sample240503-bnwwwade33
SHA256 85d547c9dbb3ad63eaebebe44bc6846ba6854e26ca04fe33fdd6b1cde2686268
MD5 dd5393a6450dbbb65d2c2b6afbfc5772
SHA1 9961b103dd5c19a0884e0fb4a80595142bd70dfe
SHA512 5ca22de7aa990a2cd58720786a4c0c5c39a93d65bac65223ffaa89478a0a82bbdcbd55d614149e905fdb19b368923bb3faee6ca064c2fdbf1f542e38835fc039
SSDEEP 12288:uW9B+VIMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:uW9BWSkQ/7Gb8NLEbeZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85d547c9dbb3ad63eaebebe44bc6846ba6854e26ca04fe33fdd6b1cde2686268

File Explorer

85d547c9dbb3ad63eaebebe44bc6846ba6854e26ca04fe33fdd6b1cde2686268

.exe 705KB

85d547c9dbb3ad63eaebebe44bc6846ba6854e26ca04fe33fdd6b1cde2686268

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 85d547c9dbb3ad63eaebebe44bc6846ba6854e26ca04fe33fdd6b1cde2686268
MD5 dd5393a6450dbbb65d2c2b6afbfc5772
SHA1 9961b103dd5c19a0884e0fb4a80595142bd70dfe
SHA512 5ca22de7aa990a2cd58720786a4c0c5c39a93d65bac65223ffaa89478a0a82bbdcbd55d614149e905fdb19b368923bb3faee6ca064c2fdbf1f542e38835fc039
SSDEEP 12288:uW9B+VIMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:uW9BWSkQ/7Gb8NLEbeZ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

85d547c9dbb3ad63eaebebe44bc6846ba6854e26ca04fe33fdd6b1cde2686268

advapi32

kernel32

shell32

user32

shlwapi

generic