221d3ff3f3accdb860f57c6e33da6a06ee38728a09855410c3e14df233053d63

General

Target
221d3ff3f3accdb860f57c6e33da6a06ee38728a09855410c3e14df233053d63
Size 774KB
Sample240509-2nhblaeb69
SHA256 221d3ff3f3accdb860f57c6e33da6a06ee38728a09855410c3e14df233053d63
MD5 df0e4d965201cab9382fa60aa5c6cb88
SHA1 6f80f89e89fab4245b50d29229d247a8aa1eaf99
SHA512 1e6cdd86cc4f3f4e8099e90f156d049b85f654ed29795cf8e6f048560fd7fe76c120b5d24d2bd019ff76653e77c9180491e47fd4c68141ee5b40f0b34d497190
SSDEEP 12288:xL/PQdcVgNPyK0Flb7aKZ2CHxu47rtoELUQztzIkmEIyfZ3Q:xL/PEEbbRxH7JoE1xz1mEFZ3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
221d3ff3f3accdb860f57c6e33da6a06ee38728a09855410c3e14df233053d63

File Explorer

221d3ff3f3accdb860f57c6e33da6a06ee38728a09855410c3e14df233053d63

.exe 774KB

221d3ff3f3accdb860f57c6e33da6a06ee38728a09855410c3e14df233053d63

IMPHASH 40ce6fbcf20eabd423c57b484adbe4f8
SHA256 221d3ff3f3accdb860f57c6e33da6a06ee38728a09855410c3e14df233053d63
MD5 df0e4d965201cab9382fa60aa5c6cb88
SHA1 6f80f89e89fab4245b50d29229d247a8aa1eaf99
SHA512 1e6cdd86cc4f3f4e8099e90f156d049b85f654ed29795cf8e6f048560fd7fe76c120b5d24d2bd019ff76653e77c9180491e47fd4c68141ee5b40f0b34d497190
SSDEEP 12288:xL/PQdcVgNPyK0Flb7aKZ2CHxu47rtoELUQztzIkmEIyfZ3Q:xL/PEEbbRxH7JoE1xz1mEFZ3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA GetCurrentDirectoryA GetSystemTime GetVolumeInformationW SetConsoleTitleA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

221d3ff3f3accdb860f57c6e33da6a06ee38728a09855410c3e14df233053d63

kernel32

advapi32

generic