989b904faba9a34be744477ce7730e1c84515ba7114f955cc5bda329d5b2e4c8

General

Target
989b904faba9a34be744477ce7730e1c84515ba7114f955cc5bda329d5b2e4c8
Size 435KB
Sample240506-2weknsaa57
SHA256 989b904faba9a34be744477ce7730e1c84515ba7114f955cc5bda329d5b2e4c8
MD5 90ebf993cfa5d02f1ec8ff15a171234f
SHA1 98027332e2b56efbed5b95f2e13b078f295441b7
SHA512 e510010a0dd0623581fecace7437430d13b7179259832da9204401f7f27c75b1f9c29c9078b1fff6dc1c39e0cea085986fa291d0e01c004782846703cca231b5
SSDEEP 6144:gnYDXuyMLH7A6nRXxOZfktYODo8+QpaAKOGP1OE98aeAfBw/6l:S42LH7LxOZf+LZrGPrq/6l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
989b904faba9a34be744477ce7730e1c84515ba7114f955cc5bda329d5b2e4c8

File Explorer

989b904faba9a34be744477ce7730e1c84515ba7114f955cc5bda329d5b2e4c8

.exe 435KB

989b904faba9a34be744477ce7730e1c84515ba7114f955cc5bda329d5b2e4c8

IMPHASH 20a6a1c56501f5fd78f9b0e0618fa18b
SHA256 989b904faba9a34be744477ce7730e1c84515ba7114f955cc5bda329d5b2e4c8
MD5 90ebf993cfa5d02f1ec8ff15a171234f
SHA1 98027332e2b56efbed5b95f2e13b078f295441b7
SHA512 e510010a0dd0623581fecace7437430d13b7179259832da9204401f7f27c75b1f9c29c9078b1fff6dc1c39e0cea085986fa291d0e01c004782846703cca231b5
SSDEEP 6144:gnYDXuyMLH7A6nRXxOZfktYODo8+QpaAKOGP1OE98aeAfBw/6l:S42LH7LxOZf+LZrGPrq/6l
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

989b904faba9a34be744477ce7730e1c84515ba7114f955cc5bda329d5b2e4c8

kernel32

advapi32

generic