70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9

General

Target
70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9
Size 311KB
Sample240524-ajbjpsed21
SHA256 70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9
MD5 f10c7ddb0241e380ea5aaa6dc3913b04
SHA1 d102f698911005a8e9352ffe110dd42bbff49971
SHA512 b92cd04fd0c2cdb9079af2ef30ed2811e17245f396ae285af8c87434066d071c09dc7c5c0fddb633c2c3814fb301dfb69737c1fdaf8ba9f26bc07027bd9654fc
SSDEEP 6144:5D+W+uKcJstfqbBjuQd8+nITvaPnHLNc:9+/u1sMd8cIUnrN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9

File Explorer

70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9

.exe 311KB

70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9

IMPHASH 09cdd0f1c1babf621b2c8a4eda60f9b0
SHA256 70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9
MD5 f10c7ddb0241e380ea5aaa6dc3913b04
SHA1 d102f698911005a8e9352ffe110dd42bbff49971
SHA512 b92cd04fd0c2cdb9079af2ef30ed2811e17245f396ae285af8c87434066d071c09dc7c5c0fddb633c2c3814fb301dfb69737c1fdaf8ba9f26bc07027bd9654fc
SSDEEP 6144:5D+W+uKcJstfqbBjuQd8+nITvaPnHLNc:9+/u1sMd8cIUnrN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5347

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA CommConfigDialogA InterlockedIncrement SetDefaultCommConfigW SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer FindFirstFileExW SetCommBreak GetModuleHandleW GetTickCount GetProcessHeap GetPriorityClass Sleep GetFileAttributesA WriteConsoleW CompareStringW SetConsoleTitleA GetConsoleAliasesW SetLastError GetProcAddress GetLongPathNameA LoadLibraryA SetCurrentDirectoryW VirtualLock GlobalGetAtomNameW OpenJobObjectW FindAtomA SetSystemTime EnumDateFormatsA FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA SetCalendarInfoA AreFileApisANSI GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

70c1d13db538c6a6b8eb0850264ea114e7c3594f818e59db60b257dea5f63bf9

kernel32

user32

generic