78b8e716db280ca8806dfa21824b993c592c33baba2a238cf2bd839f454a9cbe

General

Target
78b8e716db280ca8806dfa21824b993c592c33baba2a238cf2bd839f454a9cbe
Size 774KB
Sample240505-2lwffagc2x
SHA256 78b8e716db280ca8806dfa21824b993c592c33baba2a238cf2bd839f454a9cbe
MD5 5b14f1bfbc29a60b38ba51486799d5f5
SHA1 cf0e44b5e5368667d47b13d8e88497343779d20f
SHA512 acb6f8cf49827a02da12897eacf5bfadd484f80f1c199e069c61a267a2e7dd8c8126250adbf9658741c23f3ae0d4b44b376426b3f1345bec4a5db3170e7008b8
SSDEEP 12288:a7G68NrNixvp1l9t2tEULNc3RYVu2ETIT35l0td5KZ6YHwDDk:a7G5gx7lWtNLNcZ2E9oZlED
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78b8e716db280ca8806dfa21824b993c592c33baba2a238cf2bd839f454a9cbe

File Explorer

78b8e716db280ca8806dfa21824b993c592c33baba2a238cf2bd839f454a9cbe

.exe 774KB

78b8e716db280ca8806dfa21824b993c592c33baba2a238cf2bd839f454a9cbe

IMPHASH 787bf087217e36a86da431920ad51f39
SHA256 78b8e716db280ca8806dfa21824b993c592c33baba2a238cf2bd839f454a9cbe
MD5 5b14f1bfbc29a60b38ba51486799d5f5
SHA1 cf0e44b5e5368667d47b13d8e88497343779d20f
SHA512 acb6f8cf49827a02da12897eacf5bfadd484f80f1c199e069c61a267a2e7dd8c8126250adbf9658741c23f3ae0d4b44b376426b3f1345bec4a5db3170e7008b8
SSDEEP 12288:a7G68NrNixvp1l9t2tEULNc3RYVu2ETIT35l0td5KZ6YHwDDk:a7G5gx7lWtNLNcZ2E9oZlED
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW GetLocaleInfoW AssignProcessToJobObject IsBadCodePtr lstrcpynW FindFirstFileExA InterlockedIncrement SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW GetSystemTime SetFileAttributesW GetVolumeInformationW GetCurrentDirectoryW EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

78b8e716db280ca8806dfa21824b993c592c33baba2a238cf2bd839f454a9cbe

kernel32

advapi32

generic