686ba1cf9a832443a0c2c315f0e088b01b30a271d2ba7864bd53610811e8f9f9

General

Target
686ba1cf9a832443a0c2c315f0e088b01b30a271d2ba7864bd53610811e8f9f9
Size 419KB
Sample240504-13f7eacg9v
SHA256 686ba1cf9a832443a0c2c315f0e088b01b30a271d2ba7864bd53610811e8f9f9
MD5 bcdf3ae4da165948b4920ef34e1957f0
SHA1 241c3851c1a17b821e88143e532289a8bbd0ab4e
SHA512 df2bda7c5b0afe0ad8626ffc07a4273c0601e388680538bf5db63906beda0ffd44d8ce6abefe2c88ead3c2ee2b8b13915ae5c37dd209f2a55e59fb725d4137b1
SSDEEP 6144:adQDC9/gjoevDLvcjEgQvXr04KLq8pGYkmCuf8Tt46:adQDSojoevn4o04T8pGYkmCh46
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
686ba1cf9a832443a0c2c315f0e088b01b30a271d2ba7864bd53610811e8f9f9

File Explorer

686ba1cf9a832443a0c2c315f0e088b01b30a271d2ba7864bd53610811e8f9f9

.exe 419KB

686ba1cf9a832443a0c2c315f0e088b01b30a271d2ba7864bd53610811e8f9f9

IMPHASH 40ce6fbcf20eabd423c57b484adbe4f8
SHA256 686ba1cf9a832443a0c2c315f0e088b01b30a271d2ba7864bd53610811e8f9f9
MD5 bcdf3ae4da165948b4920ef34e1957f0
SHA1 241c3851c1a17b821e88143e532289a8bbd0ab4e
SHA512 df2bda7c5b0afe0ad8626ffc07a4273c0601e388680538bf5db63906beda0ffd44d8ce6abefe2c88ead3c2ee2b8b13915ae5c37dd209f2a55e59fb725d4137b1
SSDEEP 6144:adQDC9/gjoevDLvcjEgQvXr04KLq8pGYkmCuf8Tt46:adQDSojoevn4o04T8pGYkmCh46
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA GetCurrentDirectoryA GetSystemTime GetVolumeInformationW SetConsoleTitleA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

686ba1cf9a832443a0c2c315f0e088b01b30a271d2ba7864bd53610811e8f9f9

kernel32

advapi32

generic