20ac0cbf14865dc7314ac9f6873e9c240c63e010bc84a9c9a19b219cef7e56f6

General

Target
20ac0cbf14865dc7314ac9f6873e9c240c63e010bc84a9c9a19b219cef7e56f6
Size 236KB
Sample240507-xx2dlsbc3t
SHA256 20ac0cbf14865dc7314ac9f6873e9c240c63e010bc84a9c9a19b219cef7e56f6
MD5 c66a9c7e9b64a09f04a46f450acdea5e
SHA1 a8fa3a863badb2562d6de70ff4d90d7419ee74b8
SHA512 2bf47ad0faf8803cc02340392a54024b331bbb0abae2b1d3ed9307a7ac9fbedc7659015b2d05be7aef8747e1823c781d55b3535d3cca0396d6caeb2c161d5c6d
SSDEEP 3072:joAmj8w3h/NjF0McWnhTgjSHBRm5Pad3Gb6+:EAmRNrh9hUIWaUb6+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20ac0cbf14865dc7314ac9f6873e9c240c63e010bc84a9c9a19b219cef7e56f6

File Explorer

20ac0cbf14865dc7314ac9f6873e9c240c63e010bc84a9c9a19b219cef7e56f6

.exe 236KB

20ac0cbf14865dc7314ac9f6873e9c240c63e010bc84a9c9a19b219cef7e56f6

IMPHASH 846e3703eabe2e97bf5cd60565d49593
SHA256 20ac0cbf14865dc7314ac9f6873e9c240c63e010bc84a9c9a19b219cef7e56f6
MD5 c66a9c7e9b64a09f04a46f450acdea5e
SHA1 a8fa3a863badb2562d6de70ff4d90d7419ee74b8
SHA512 2bf47ad0faf8803cc02340392a54024b331bbb0abae2b1d3ed9307a7ac9fbedc7659015b2d05be7aef8747e1823c781d55b3535d3cca0396d6caeb2c161d5c6d
SSDEEP 3072:joAmj8w3h/NjF0McWnhTgjSHBRm5Pad3Gb6+:EAmRNrh9hUIWaUb6+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement EnumCalendarInfoW GetCommState SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FindFirstFileExW GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GlobalAlloc LoadLibraryW GetLocaleInfoW lstrcpynW IsBadWritePtr SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA OpenJobObjectW FindAtomA FreeEnvironmentStringsW EnumDateFormatsW GetSystemTime SetFileAttributesW HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

20ac0cbf14865dc7314ac9f6873e9c240c63e010bc84a9c9a19b219cef7e56f6

kernel32

generic