b97edba2e0e81b4cc7d99a6776f80d50ce46952680c71b06428f6a3206c366f7

General

Target
b97edba2e0e81b4cc7d99a6776f80d50ce46952680c71b06428f6a3206c366f7
Size 416KB
Sample240509-3efbbada7w
SHA256 b97edba2e0e81b4cc7d99a6776f80d50ce46952680c71b06428f6a3206c366f7
MD5 7b2875cb05e2096cdff530aa2b6fc6fc
SHA1 3db46544f57870426eaee8aa07bdd1e605c54b29
SHA512 0e0208f81195b6e5c3c01e2bed1cf38fb9221b0c86190da4e77763880da21d1b5f81c142dfcf27ee6ba8d7ff3383d1417d466a28c5bdc2f13a0dd498f4928441
SSDEEP 6144:xNDSLZK+bH6tSYLDidexnCihNJnrWXy1JFIHbP3ShohW90F:LSLZKK/dCCibRz4PiLaF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97edba2e0e81b4cc7d99a6776f80d50ce46952680c71b06428f6a3206c366f7

File Explorer

b97edba2e0e81b4cc7d99a6776f80d50ce46952680c71b06428f6a3206c366f7

.exe 416KB

b97edba2e0e81b4cc7d99a6776f80d50ce46952680c71b06428f6a3206c366f7

IMPHASH 36564a2dfe3f389d02697b130c51e1fc
SHA256 b97edba2e0e81b4cc7d99a6776f80d50ce46952680c71b06428f6a3206c366f7
MD5 7b2875cb05e2096cdff530aa2b6fc6fc
SHA1 3db46544f57870426eaee8aa07bdd1e605c54b29
SHA512 0e0208f81195b6e5c3c01e2bed1cf38fb9221b0c86190da4e77763880da21d1b5f81c142dfcf27ee6ba8d7ff3383d1417d466a28c5bdc2f13a0dd498f4928441
SSDEEP 6144:xNDSLZK+bH6tSYLDidexnCihNJnrWXy1JFIHbP3ShohW90F:LSLZKK/dCCibRz4PiLaF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6219

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA InterlockedIncrement SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW GetLocaleInfoW AssignProcessToJobObject IsBadCodePtr lstrcpynW FindFirstFileExA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW GetSystemTime SetFileAttributesW GetVolumeInformationW GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

b97edba2e0e81b4cc7d99a6776f80d50ce46952680c71b06428f6a3206c366f7

kernel32

generic