347ed793c20c65b947fe2addfa2e0670812096daeece05602fa0c09838daf1b4

Sharing

Copy URL Twitter E-mail

General

Target
347ed793c20c65b947fe2addfa2e0670812096daeece05602fa0c09838daf1b4
Size 221KB
Sample240516-2xte8ada22
SHA256 347ed793c20c65b947fe2addfa2e0670812096daeece05602fa0c09838daf1b4
MD5 99f8fa2f42bd46328f05f25afa850ae1
SHA1 1fbd4ecc62f611a030933ecb9a3658f659a27b5c
SHA512 91bf3f8fef02270a889dbd1bd748221f81e6f82e2d0c9744648d48cef5d1e54fae2b6f3054c586fc84ac1ca541b90f16e54a38e7e29ee6933cc0a52726b5a603
SSDEEP 3072:WZRBUgBkCV3gWLS+dFq6OcuTSKDvzi7wZbkjgKwPqG1sOrXrR3wtBCF:WiDp0ZwUgKwC8sqpw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
347ed793c20c65b947fe2addfa2e0670812096daeece05602fa0c09838daf1b4

File Explorer

347ed793c20c65b947fe2addfa2e0670812096daeece05602fa0c09838daf1b4

.exe 221KB

347ed793c20c65b947fe2addfa2e0670812096daeece05602fa0c09838daf1b4

IMPHASH 6a21032514c5a6eb57fe18823be44730
SHA256 347ed793c20c65b947fe2addfa2e0670812096daeece05602fa0c09838daf1b4
MD5 99f8fa2f42bd46328f05f25afa850ae1
SHA1 1fbd4ecc62f611a030933ecb9a3658f659a27b5c
SHA512 91bf3f8fef02270a889dbd1bd748221f81e6f82e2d0c9744648d48cef5d1e54fae2b6f3054c586fc84ac1ca541b90f16e54a38e7e29ee6933cc0a52726b5a603
SSDEEP 3072:WZRBUgBkCV3gWLS+dFq6OcuTSKDvzi7wZbkjgKwPqG1sOrXrR3wtBCF:WiDp0ZwUgKwC8sqpw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetTickCount GetSystemDirectoryW WriteConsoleW SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress RemoveDirectoryA LoadLibraryA OpenMutexA SystemTimeToTzSpecificLocalTime LocalAlloc GetNumberFormatW CreateEventW GetModuleFileNameA LoadLibraryExA BuildCommDCBA VirtualProtect PurgeComm GetVolumeInformationW CloseHandle CreateFileW GetStringTypeW OutputDebugStringW WriteConsoleA GetComputerNameA GetConsoleCP FlushFileBuffers IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection ReadFile GetConsoleMode ReadConsoleW HeapFree SetFilePointerEx DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc SetStdHandle LCMapStringW SetEndOfFile

user32

SetCaretPos GetMenuItemID ChangeDisplaySettingsW

gdi32

GetCharWidthI

ole32

CoMarshalHresult

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

347ed793c20c65b947fe2addfa2e0670812096daeece05602fa0c09838daf1b4

kernel32

user32

gdi32

ole32

msimg32

generic