ae6b8abecd884d6d2a6f3879f2deed20e5ba43d2d2c100b7aa9d884b8933e0fa

General

Target
ae6b8abecd884d6d2a6f3879f2deed20e5ba43d2d2c100b7aa9d884b8933e0fa
Size 223KB
Sample240520-3ba77abd5v
SHA256 ae6b8abecd884d6d2a6f3879f2deed20e5ba43d2d2c100b7aa9d884b8933e0fa
MD5 c124bb4285fc52d47348d7aac1565663
SHA1 a6be6a133146469aef52d1120e7883a2fa14c13f
SHA512 c40f05d281bb30965afda6ccf657e746e71ebd23b9c644e1df32531fcfff7d6142d31ef647fe49357da501db00c7bc251c261b90cb812bae1b5d25947e36d6bd
SSDEEP 3072:zJijjAq0c/ntyKO7fN+HZ/TAvCJ9NFVQi/i1zaYe+K8kKwLmTAKh1aiRmEWjLYS:zuc3P7bNVmVQiqAYDK1L6AKh1ai8T3Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae6b8abecd884d6d2a6f3879f2deed20e5ba43d2d2c100b7aa9d884b8933e0fa

File Explorer

ae6b8abecd884d6d2a6f3879f2deed20e5ba43d2d2c100b7aa9d884b8933e0fa

.exe 223KB

ae6b8abecd884d6d2a6f3879f2deed20e5ba43d2d2c100b7aa9d884b8933e0fa

IMPHASH d08c693d6b37dffb2d0d8034d5a686d4
SHA256 ae6b8abecd884d6d2a6f3879f2deed20e5ba43d2d2c100b7aa9d884b8933e0fa
MD5 c124bb4285fc52d47348d7aac1565663
SHA1 a6be6a133146469aef52d1120e7883a2fa14c13f
SHA512 c40f05d281bb30965afda6ccf657e746e71ebd23b9c644e1df32531fcfff7d6142d31ef647fe49357da501db00c7bc251c261b90cb812bae1b5d25947e36d6bd
SSDEEP 3072:zJijjAq0c/ntyKO7fN+HZ/TAvCJ9NFVQi/i1zaYe+K8kKwLmTAKh1aiRmEWjLYS:zuc3P7bNVmVQiqAYDK1L6AKh1ai8T3Y
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleW GetSystemDirectoryA SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress RemoveDirectoryA LoadLibraryA CreateEventA LocalAlloc GetNumberFormatW CreateEventW GetModuleFileNameA LoadLibraryExA BuildCommDCBA VirtualProtect PurgeComm SetFileAttributesW GetTickCount GetVolumeInformationA WriteConsoleA GetConsoleAliasA EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapAlloc IsDebuggerPresent ReadFile HeapSize EnterCriticalSection LeaveCriticalSection HeapFree GetProcessHeap CloseHandle DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetFilePointerEx GetConsoleMode ReadConsoleW LCMapStringW SetStdHandle FlushFileBuffers GetConsoleCP OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile

gdi32

GetBoundsRect GetCharWidthI

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

ae6b8abecd884d6d2a6f3879f2deed20e5ba43d2d2c100b7aa9d884b8933e0fa

kernel32

gdi32

advapi32

generic