69a19c1d13ab68f9ba569caa4d2ba8dc294ddf9d0f1645050ea41f2e230f3d81

General

Target
69a19c1d13ab68f9ba569caa4d2ba8dc294ddf9d0f1645050ea41f2e230f3d81
Size 231KB
Sample240516-29357adh34
SHA256 69a19c1d13ab68f9ba569caa4d2ba8dc294ddf9d0f1645050ea41f2e230f3d81
MD5 06b5350374484c2ba837261a8b8eac79
SHA1 84ee0c090fada47e2249a7582c0544336c4cf8be
SHA512 4ab8d85003c16edd2b6eb34f0197d36aaf5f1bd911cd20cf376e233d444ddbcc515a7b64b0676f9f1871ed0acb983b09da56379b4e2d41a4aa72443cf319f40a
SSDEEP 6144:+DO/wiW6/Y5l+xiVV+brOVlH39sI+XURb2:+DCw5nX+xiVVxHL+Xx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69a19c1d13ab68f9ba569caa4d2ba8dc294ddf9d0f1645050ea41f2e230f3d81

File Explorer

69a19c1d13ab68f9ba569caa4d2ba8dc294ddf9d0f1645050ea41f2e230f3d81

.exe 231KB

69a19c1d13ab68f9ba569caa4d2ba8dc294ddf9d0f1645050ea41f2e230f3d81

IMPHASH db835db0253e5ddc4c3195187d427607
SHA256 69a19c1d13ab68f9ba569caa4d2ba8dc294ddf9d0f1645050ea41f2e230f3d81
MD5 06b5350374484c2ba837261a8b8eac79
SHA1 84ee0c090fada47e2249a7582c0544336c4cf8be
SHA512 4ab8d85003c16edd2b6eb34f0197d36aaf5f1bd911cd20cf376e233d444ddbcc515a7b64b0676f9f1871ed0acb983b09da56379b4e2d41a4aa72443cf319f40a
SSDEEP 6144:+DO/wiW6/Y5l+xiVV+brOVlH39sI+XURb2:+DCw5nX+xiVVxHL+Xx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW LoadLibraryExW GetConsoleAliasA InterlockedDecrement CreateHardLinkA LockFile GetTickCount ReadConsoleW EnumTimeFormatsW TzSpecificLocalTimeToSystemTime GetVolumeInformationA GlobalFindAtomA LoadLibraryW ReadConsoleInputA WriteConsoleW GetSystemDirectoryA SetComputerNameExW GetTempPathW InterlockedExchange SetFilePointer SetLastError GetProcAddress BackupWrite BuildCommDCBW LoadModule OpenMutexA LocalAlloc GetNumberFormatW AddAtomW CreateEventW RemoveDirectoryW VirtualProtect PurgeComm GetWindowsDirectoryW CloseHandle CreateFileW GetLastError GetComputerNameA IsProcessorFeaturePresent EncodePointer DecodePointer ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW SetEndOfFile

user32

SetCaretPos

gdi32

GetCharABCWidthsI

Sharing

General

Malware Config

Signatures

File Explorer

69a19c1d13ab68f9ba569caa4d2ba8dc294ddf9d0f1645050ea41f2e230f3d81

kernel32

user32

gdi32

generic