a369bc4afec47220b6b868d01f5a2c8064c2cbe26f373430cdf908c79e8c993a

General

Target
a369bc4afec47220b6b868d01f5a2c8064c2cbe26f373430cdf908c79e8c993a
Size 368KB
Sample240508-lvc3fsef21
SHA256 a369bc4afec47220b6b868d01f5a2c8064c2cbe26f373430cdf908c79e8c993a
MD5 cc143dd32c69c02421ee8babefc58e71
SHA1 1710667f583a80b1c5fe1a1775ade91ef9945c14
SHA512 424e32a3431947eaf8d18b9aa475a280314403f70ce2579ec4c01009a42d6fc886048b079e1295fffbddd767eb070c6855edfc7df2213fab265911f24d50da31
SSDEEP 6144:mQLsPnj9HcQoscXDIkJUVmPdKTfVvvIFGg1w8c4lZNTpj4:DLsRxoscIeUMVCNX2Vw2lTpj4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a369bc4afec47220b6b868d01f5a2c8064c2cbe26f373430cdf908c79e8c993a

File Explorer

a369bc4afec47220b6b868d01f5a2c8064c2cbe26f373430cdf908c79e8c993a

.exe 368KB

a369bc4afec47220b6b868d01f5a2c8064c2cbe26f373430cdf908c79e8c993a

IMPHASH fc91b55eee00a3194291e4b78fa9b52e
SHA256 a369bc4afec47220b6b868d01f5a2c8064c2cbe26f373430cdf908c79e8c993a
MD5 cc143dd32c69c02421ee8babefc58e71
SHA1 1710667f583a80b1c5fe1a1775ade91ef9945c14
SHA512 424e32a3431947eaf8d18b9aa475a280314403f70ce2579ec4c01009a42d6fc886048b079e1295fffbddd767eb070c6855edfc7df2213fab265911f24d50da31
SSDEEP 6144:mQLsPnj9HcQoscXDIkJUVmPdKTfVvvIFGg1w8c4lZNTpj4:DLsRxoscIeUMVCNX2Vw2lTpj4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GlobalMemoryStatus SetFilePointer InterlockedIncrement GetCommState GetConsoleAliasA InterlockedDecrement SetComputerNameW LockFile GetModuleHandleW GetTickCount GetWindowsDirectoryA EnumTimeFormatsA GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW ReadConsoleInputA WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW GetLastError SetLastError GetProcAddress BackupWrite RemoveDirectoryA BuildCommDCBW LoadLibraryA LocalAlloc CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW LoadLibraryExA VirtualProtect SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW HeapFree EncodePointer DecodePointer ReadFile GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetProcessHeap ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize SetFilePointerEx GetConsoleMode ReadConsoleW GetCurrentThreadId GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc LCMapStringW SetStdHandle FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetCaretBlinkTime SetMenu

Sharing

General

Malware Config

Signatures

File Explorer

a369bc4afec47220b6b868d01f5a2c8064c2cbe26f373430cdf908c79e8c993a

kernel32

user32

generic