4f4893322feafe330bf7005fbf51a69f77ee54e3bf1090ed6377d0566cd9e392

General

Target
4f4893322feafe330bf7005fbf51a69f77ee54e3bf1090ed6377d0566cd9e392
Size 274KB
Sample240507-2rrpfafa85
SHA256 4f4893322feafe330bf7005fbf51a69f77ee54e3bf1090ed6377d0566cd9e392
MD5 713ceb72ece212914fe97c1000a8d6b5
SHA1 b388f96201387c9c0c7ac95660b9259c37c20637
SHA512 8375843858ee700c02d0c8a868aec588d0056997b5b7e5e15eb92d8e5b5fe45a9d84ea40eb1296ba29655d5c7e4d5085673bfefe5a105d913aae938746a9b297
SSDEEP 3072:7ifeOgws2ABhhyJWVi8T+dGQhSQB6MwLyyVSx4MmT2l1HuMwZxGre:bPbMiik7GZhwZ84Mm6l1Ork
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f4893322feafe330bf7005fbf51a69f77ee54e3bf1090ed6377d0566cd9e392

File Explorer

4f4893322feafe330bf7005fbf51a69f77ee54e3bf1090ed6377d0566cd9e392

.exe 274KB

4f4893322feafe330bf7005fbf51a69f77ee54e3bf1090ed6377d0566cd9e392

IMPHASH d4e235ce871ad26a687da89d3c34041b
SHA256 4f4893322feafe330bf7005fbf51a69f77ee54e3bf1090ed6377d0566cd9e392
MD5 713ceb72ece212914fe97c1000a8d6b5
SHA1 b388f96201387c9c0c7ac95660b9259c37c20637
SHA512 8375843858ee700c02d0c8a868aec588d0056997b5b7e5e15eb92d8e5b5fe45a9d84ea40eb1296ba29655d5c7e4d5085673bfefe5a105d913aae938746a9b297
SSDEEP 3072:7ifeOgws2ABhhyJWVi8T+dGQhSQB6MwLyyVSx4MmT2l1HuMwZxGre:bPbMiik7GZhwZ84Mm6l1Ork
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer InterlockedIncrement InterlockedDecrement GetComputerNameW LockFile BackupSeek EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetLastError SetLastError GetProcAddress SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW RemoveDirectoryW GlobalUnWire GetModuleHandleA LoadLibraryExA VirtualProtect GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetTempPathA SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetCaretPos ChangeMenuA

Sharing

General

Malware Config

Signatures

File Explorer

4f4893322feafe330bf7005fbf51a69f77ee54e3bf1090ed6377d0566cd9e392

kernel32

user32

generic