9325aa096b26e56e794f33f1e2f6acdf6b1cd256d687605a62bf8fbdbb8524f0

General

Target
9325aa096b26e56e794f33f1e2f6acdf6b1cd256d687605a62bf8fbdbb8524f0
Size 81KB
Sample240511-advqdscd74
SHA256 9325aa096b26e56e794f33f1e2f6acdf6b1cd256d687605a62bf8fbdbb8524f0
MD5 9d4489338a1fc791a5a0f4d8b901c1ad
SHA1 10c83c18e702dffe294f7e6733fa125d3c087515
SHA512 b795c4bec98b46bbbbaec052029f3fe3adbcdb9d7cc7295d1a560a0fccfc43dd6df893a5b94a6041d1a7bdaafcad864bd6a7a67bbe7508368cec679e44332278
SSDEEP 1536:ftByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8Wi:f4v4JKXTx71w0ArSsXF3enq8Wi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9325aa096b26e56e794f33f1e2f6acdf6b1cd256d687605a62bf8fbdbb8524f0

File Explorer

9325aa096b26e56e794f33f1e2f6acdf6b1cd256d687605a62bf8fbdbb8524f0

.dll 81KB

9325aa096b26e56e794f33f1e2f6acdf6b1cd256d687605a62bf8fbdbb8524f0

IMPHASH 0986ee100b9277b4d1503d41cc8367e7
SHA256 9325aa096b26e56e794f33f1e2f6acdf6b1cd256d687605a62bf8fbdbb8524f0
MD5 9d4489338a1fc791a5a0f4d8b901c1ad
SHA1 10c83c18e702dffe294f7e6733fa125d3c087515
SHA512 b795c4bec98b46bbbbaec052029f3fe3adbcdb9d7cc7295d1a560a0fccfc43dd6df893a5b94a6041d1a7bdaafcad864bd6a7a67bbe7508368cec679e44332278
SSDEEP 1536:ftByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8Wi:f4v4JKXTx71w0ArSsXF3enq8Wi
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

HeapFree GetCurrentProcess CreateMutexA LocalAlloc Sleep GetLastError CreateFileA LoadLibraryA CloseHandle K32GetModuleInformation VirtualProtect VirtualAllocEx LocalFree GetFileSize ExitProcess ReadProcessMemory GetProcessHeap FreeLibrary K32EnumProcessModules GetComputerNameA WriteConsoleW WriteProcessMemory GetModuleFileNameA HeapAlloc ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW EncodePointer RaiseException GetModuleHandleExW GetModuleFileNameW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

9325aa096b26e56e794f33f1e2f6acdf6b1cd256d687605a62bf8fbdbb8524f0

kernel32

generic