16b3914ebfaa825ba603ca3097f8379550f4abefd811fc633a3cb35322c10010

General

Target
16b3914ebfaa825ba603ca3097f8379550f4abefd811fc633a3cb35322c10010
Size 716KB
Sample240519-nhtwjsfe4s
SHA256 16b3914ebfaa825ba603ca3097f8379550f4abefd811fc633a3cb35322c10010
MD5 6ea03e88e1614039656ec2799514a4fc
SHA1 0bd766911768617472f6ffc6f44b818ec4d0329a
SHA512 80b784ee24141e286f1c6d28ee1526297bb71d044f015dc06f020437052495f53ba4afffc2c58234741493ca403274c67518f0d5340dacec87c7b4eb6a815976
SSDEEP 12288:0ZoQ7O3MZem3cEMNRp4ZdYKYxGIfJdzzpTLdv210LLWux+WdJW3IA/uLrlp:0ROs3fMJ4EKqpJdRTLdvq0LFAurlp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b3914ebfaa825ba603ca3097f8379550f4abefd811fc633a3cb35322c10010

File Explorer

16b3914ebfaa825ba603ca3097f8379550f4abefd811fc633a3cb35322c10010

.exe 716KB

16b3914ebfaa825ba603ca3097f8379550f4abefd811fc633a3cb35322c10010

IMPHASH 2212f364126525f74957e1259da0fd4a
SHA256 16b3914ebfaa825ba603ca3097f8379550f4abefd811fc633a3cb35322c10010
MD5 6ea03e88e1614039656ec2799514a4fc
SHA1 0bd766911768617472f6ffc6f44b818ec4d0329a
SHA512 80b784ee24141e286f1c6d28ee1526297bb71d044f015dc06f020437052495f53ba4afffc2c58234741493ca403274c67518f0d5340dacec87c7b4eb6a815976
SSDEEP 12288:0ZoQ7O3MZem3cEMNRp4ZdYKYxGIfJdzzpTLdv210LLWux+WdJW3IA/uLrlp:0ROs3fMJ4EKqpJdRTLdvq0LFAurlp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5797

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA RtlCaptureContext CommConfigDialogA DebugActiveProcessStop WriteConsoleOutputW InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer SetCommBreak FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesA GetConsoleAliasesLengthA LoadLibraryW Sleep ReadFileScatter WriteConsoleW CompareStringW VirtualUnlock FindFirstFileExA GetLongPathNameW SetLastError GetProcAddress VerLanguageNameA LoadLibraryA OpenJobObjectW SetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA DeleteCriticalSection FindAtomW HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

SetActiveWindow

Sharing

General

Malware Config

Signatures

File Explorer

16b3914ebfaa825ba603ca3097f8379550f4abefd811fc633a3cb35322c10010

kernel32

user32

generic