dbf3a45df3d3849bc028c3bccb852655cb0d01edadc9ff0cbc6c88e50dca5d23

General

Target
dbf3a45df3d3849bc028c3bccb852655cb0d01edadc9ff0cbc6c88e50dca5d23
Size 234KB
Sample240526-bfk5eahb5y
SHA256 dbf3a45df3d3849bc028c3bccb852655cb0d01edadc9ff0cbc6c88e50dca5d23
MD5 02644161e2f9fc67a85443420a706f53
SHA1 c278f508913fadb1d122d49e91dffc55c6e9dc57
SHA512 7fba5a1c4ca72c11bd3eba486528b335052e0b07cdc446a12e6a2917bad6ca5d01783819dfc61023ab59119469970ac93dc043f7313e3507dd84452f8b3ef626
SSDEEP 6144:ZDoRVGTcR02XAYkjp6p5b9KSWatq6Z0JT:toRWi0QAfdehWJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbf3a45df3d3849bc028c3bccb852655cb0d01edadc9ff0cbc6c88e50dca5d23

File Explorer

dbf3a45df3d3849bc028c3bccb852655cb0d01edadc9ff0cbc6c88e50dca5d23

.exe 234KB

dbf3a45df3d3849bc028c3bccb852655cb0d01edadc9ff0cbc6c88e50dca5d23

IMPHASH 8744ff8cb8213e20c3a4b3f29831f2ef
SHA256 dbf3a45df3d3849bc028c3bccb852655cb0d01edadc9ff0cbc6c88e50dca5d23
MD5 02644161e2f9fc67a85443420a706f53
SHA1 c278f508913fadb1d122d49e91dffc55c6e9dc57
SHA512 7fba5a1c4ca72c11bd3eba486528b335052e0b07cdc446a12e6a2917bad6ca5d01783819dfc61023ab59119469970ac93dc043f7313e3507dd84452f8b3ef626
SSDEEP 6144:ZDoRVGTcR02XAYkjp6p5b9KSWatq6Z0JT:toRWi0QAfdehWJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17351

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GlobalAlloc GetLastError SetLastError GetThreadContext GetTickCount CreateEventA LoadLibraryA LoadLibraryW LoadLibraryExW GetModuleFileNameW GetSystemDirectoryA GetTempPathA CreateDirectoryW SetFileAttributesW GetVolumeInformationA BuildCommDCBW SetComputerNameExA VerifyVersionInfoW IsProcessInJob SetVolumeMountPointW GetLocaleInfoW SetCalendarInfoW GetNumberFormatW GetStringTypeW SetConsoleCursorInfo AllocConsole WriteConsoleW AddConsoleAliasA OutputDebugStringW GetConsoleCP FlushFileBuffers IsBadStringPtrA InterlockedExchange EncodePointer DecodePointer ReadFile RaiseException RtlUnwind GetCommandLineW IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection CloseHandle SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetCurrentThreadId GetProcessHeap WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LCMapStringW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc SetStdHandle CreateFileW

user32

GetSysColorBrush DdeFreeStringHandle

gdi32

GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

dbf3a45df3d3849bc028c3bccb852655cb0d01edadc9ff0cbc6c88e50dca5d23

kernel32

user32

gdi32

generic