1d05661d8c7a296602f66a8aac7cb16115354a313fc2019088e5ba92c29f3c40

General

Target
1d05661d8c7a296602f66a8aac7cb16115354a313fc2019088e5ba92c29f3c40
Size 274KB
Sample240506-tnt2dshf4v
SHA256 1d05661d8c7a296602f66a8aac7cb16115354a313fc2019088e5ba92c29f3c40
MD5 5ade13af5562d781ed7c2125b798937b
SHA1 4c8e9e941bd9a7beb5b67c224a85bb82b501fed8
SHA512 f07e3966cf2e5f0a098e9b76ee6519f1ea473053736d02c872ec0caece31a51b324a2cf239b7a89859e9425e3f046451074468ba21ffb4efec1c68667eaeab20
SSDEEP 3072:Cfu+QSsMAYB4/tVHc3+EGQhSq0iddqTACAW6GvbfwVk4X4y4Xb8uW0uMwZxGre:PvfrHQKG6iuTACb6aFTfXb8uWdrk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d05661d8c7a296602f66a8aac7cb16115354a313fc2019088e5ba92c29f3c40

File Explorer

1d05661d8c7a296602f66a8aac7cb16115354a313fc2019088e5ba92c29f3c40

.exe 274KB

1d05661d8c7a296602f66a8aac7cb16115354a313fc2019088e5ba92c29f3c40

IMPHASH d4e235ce871ad26a687da89d3c34041b
SHA256 1d05661d8c7a296602f66a8aac7cb16115354a313fc2019088e5ba92c29f3c40
MD5 5ade13af5562d781ed7c2125b798937b
SHA1 4c8e9e941bd9a7beb5b67c224a85bb82b501fed8
SHA512 f07e3966cf2e5f0a098e9b76ee6519f1ea473053736d02c872ec0caece31a51b324a2cf239b7a89859e9425e3f046451074468ba21ffb4efec1c68667eaeab20
SSDEEP 3072:Cfu+QSsMAYB4/tVHc3+EGQhSq0iddqTACAW6GvbfwVk4X4y4Xb8uW0uMwZxGre:PvfrHQKG6iuTACb6aFTfXb8uWdrk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer InterlockedIncrement InterlockedDecrement GetComputerNameW LockFile BackupSeek EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetLastError SetLastError GetProcAddress SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW RemoveDirectoryW GlobalUnWire GetModuleHandleA LoadLibraryExA VirtualProtect GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetTempPathA SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetCaretPos ChangeMenuA

Sharing

General

Malware Config

Signatures

File Explorer

1d05661d8c7a296602f66a8aac7cb16115354a313fc2019088e5ba92c29f3c40

kernel32

user32

generic