116581df927fa64b9e79294a48c54b207fd0995f5b43c6d253f31df24f00b072

General

Target
116581df927fa64b9e79294a48c54b207fd0995f5b43c6d253f31df24f00b072
Size 739KB
Sample240509-lvambsbf4w
SHA256 116581df927fa64b9e79294a48c54b207fd0995f5b43c6d253f31df24f00b072
MD5 294ff2cd130cadd74986e8f215349f73
SHA1 c50f83bb50774b3a9cbaa3ffc4fed84c55b35f54
SHA512 3857831273fcf3f3ea57f4b37384170d16d7747597410a118f919452b0f843ce85f1ec9d24b4702e954a608c196bb7ff2e1946d2873c7073325c394856471df7
SSDEEP 12288:+FnJuMyhtNPvd69N9Z8RIormvzfMmQkl+e7AkSY2CbQWcQeZVQ1eank7VXJtaJK:+FnJulv+pogM4QeJSrCbQrQe/QgWYVZi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116581df927fa64b9e79294a48c54b207fd0995f5b43c6d253f31df24f00b072

File Explorer

116581df927fa64b9e79294a48c54b207fd0995f5b43c6d253f31df24f00b072

.exe 739KB

116581df927fa64b9e79294a48c54b207fd0995f5b43c6d253f31df24f00b072

IMPHASH 7728fdfee954e106d39411e9e7e8ccc0
SHA256 116581df927fa64b9e79294a48c54b207fd0995f5b43c6d253f31df24f00b072
MD5 294ff2cd130cadd74986e8f215349f73
SHA1 c50f83bb50774b3a9cbaa3ffc4fed84c55b35f54
SHA512 3857831273fcf3f3ea57f4b37384170d16d7747597410a118f919452b0f843ce85f1ec9d24b4702e954a608c196bb7ff2e1946d2873c7073325c394856471df7
SSDEEP 12288:+FnJuMyhtNPvd69N9Z8RIormvzfMmQkl+e7AkSY2CbQWcQeZVQ1eank7VXJtaJK:+FnJulv+pogM4QeJSrCbQrQe/QgWYVZi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5206

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW GetCommState InterlockedDecrement WaitForSingleObject SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap GetSystemTimes GlobalAlloc GetLocaleInfoW lstrcpynW IsBadWritePtr SetCurrentDirectoryA FindFirstFileExA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW LoadLibraryA WriteConsoleA SetFileApisToANSI FindNextChangeNotification OpenJobObjectW FindAtomA FreeEnvironmentStringsW EnumDateFormatsW GetSystemTime SetFileAttributesW HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

116581df927fa64b9e79294a48c54b207fd0995f5b43c6d253f31df24f00b072

kernel32

generic