1c66b055f82294658caeb12b48a82baa447537296f3f68ba4598ca767d0aac3c

General

Target
1c66b055f82294658caeb12b48a82baa447537296f3f68ba4598ca767d0aac3c
Size 271KB
Sample240504-1962eagd68
SHA256 1c66b055f82294658caeb12b48a82baa447537296f3f68ba4598ca767d0aac3c
MD5 e16c7731f650a9f3679303d0f3c034a3
SHA1 fc76465f2e3e01e675215cb5fab349d72125dbb5
SHA512 191d460f47bed4060a8647d3dd04db4bef19abe20fad6a78d9245d6c589d3d03e628c1a236de2901be38561036bf425bdbd94874303b542f26993c79a4b2555a
SSDEEP 3072:o+/Q0gpCtI9bL+hAL+lSh5P6yWkBo8YmA1QtmEUD0EPbDCF1V:04udLhh5PakO8IQtmEUDpPs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c66b055f82294658caeb12b48a82baa447537296f3f68ba4598ca767d0aac3c

File Explorer

1c66b055f82294658caeb12b48a82baa447537296f3f68ba4598ca767d0aac3c

.exe 271KB

1c66b055f82294658caeb12b48a82baa447537296f3f68ba4598ca767d0aac3c

IMPHASH e192e24990773dcb955dc12831abae87
SHA256 1c66b055f82294658caeb12b48a82baa447537296f3f68ba4598ca767d0aac3c
MD5 e16c7731f650a9f3679303d0f3c034a3
SHA1 fc76465f2e3e01e675215cb5fab349d72125dbb5
SHA512 191d460f47bed4060a8647d3dd04db4bef19abe20fad6a78d9245d6c589d3d03e628c1a236de2901be38561036bf425bdbd94874303b542f26993c79a4b2555a
SSDEEP 3072:o+/Q0gpCtI9bL+hAL+lSh5P6yWkBo8YmA1QtmEUD0EPbDCF1V:04udLhh5PakO8IQtmEUDpPs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16244

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pix\lamalen\patidafada.pdb

kernel32

CommConfigDialogA LoadLibraryExW InterlockedIncrement InterlockedDecrement BackupSeek GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW TerminateThread GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetFullPathNameA GetConsoleOutputCP GetLastError SetLastError GetProcAddress LoadLibraryA CreateHardLinkW CreateEventW AddAtomA GlobalFindAtomW GlobalUnWire BuildCommDCBA VirtualProtect GetVersionExA ReadConsoleInputW GetCurrentProcessId SetFileAttributesW GetVolumeInformationW GetTempPathW GetComputerNameA EncodePointer DecodePointer ExitProcess GetModuleHandleExW WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW

gdi32

DeleteMetaFile

Sharing

General

Malware Config

Signatures

File Explorer

1c66b055f82294658caeb12b48a82baa447537296f3f68ba4598ca767d0aac3c

kernel32

gdi32

generic