3610e424061338c41ebface3f350a9fc0274a1c8f4f81a97ad71989ff4509fcd

General

Target
3610e424061338c41ebface3f350a9fc0274a1c8f4f81a97ad71989ff4509fcd
Size 1.2MB
Sample240526-l1pcnsfb53
SHA256 3610e424061338c41ebface3f350a9fc0274a1c8f4f81a97ad71989ff4509fcd
MD5 fddf0bc88f7a81202639f30b7daa1645
SHA1 ff46fe264a4182f09f25be1b08f429094ddeb842
SHA512 0b108d5178e26c3c4bc94ee53fb6a7a6da30d47db3f84cd90d3ed68c5587dfe907d44c12ea86638849293ad56b14342243754355637fb5e56268265ccb85808b
SSDEEP 24576:gqo1V4IDQ1rThff+r/ibJIRYP6h95S+VlLExqWXTHRyWtv4r6Pixmr:gqoTDerQKwS+vExqWXTxyWF4r6P8U
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3610e424061338c41ebface3f350a9fc0274a1c8f4f81a97ad71989ff4509fcd

File Explorer

3610e424061338c41ebface3f350a9fc0274a1c8f4f81a97ad71989ff4509fcd

.exe 1.2MB

3610e424061338c41ebface3f350a9fc0274a1c8f4f81a97ad71989ff4509fcd

IMPHASH dfdd67e59dbfb26ed608ae692b819ab4
SHA256 3610e424061338c41ebface3f350a9fc0274a1c8f4f81a97ad71989ff4509fcd
MD5 fddf0bc88f7a81202639f30b7daa1645
SHA1 ff46fe264a4182f09f25be1b08f429094ddeb842
SHA512 0b108d5178e26c3c4bc94ee53fb6a7a6da30d47db3f84cd90d3ed68c5587dfe907d44c12ea86638849293ad56b14342243754355637fb5e56268265ccb85808b
SSDEEP 24576:gqo1V4IDQ1rThff+r/ibJIRYP6h95S+VlLExqWXTHRyWtv4r6Pixmr:gqoTDerQKwS+vExqWXTxyWF4r6P8U
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

660788

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\git_code\CommonPlatform\Helper2345\bin\Win32\Release\pdb\Helper_2345.pdb

kernel32

LoadLibraryW GetProcAddress LocalFree FreeLibrary CreateMutexW WaitForSingleObject ReleaseMutex Sleep GetLastError CloseHandle ExpandEnvironmentStringsW GetFileAttributesW GetModuleHandleW FindFirstFileW GetLongPathNameW CreateFileW GetFileAttributesExW HeapFree GetCurrentThreadId GetVersionExW GetComputerNameExW OpenProcess HeapAlloc GetProcessHeap lstrlenW lstrcmpiW ReadFile WriteFile SetFilePointer SetEndOfFile DeleteFileW GetFileSizeEx EnterCriticalSection LeaveCriticalSection GetModuleFileNameW DeleteCriticalSection FindNextFileW FindClose SetFileTime GetFileSize GetFileTime CreateDirectoryW GetFullPathNameW RemoveDirectoryW GetTempPathW SetFileAttributesW GetCurrentDirectoryW GetWindowsDirectoryW MoveFileExW GetTempFileNameW MoveFileW LockResource GetSystemInfo LoadResource FindResourceW QueryDosDeviceW GetCurrentProcess WaitForMultipleObjects GetCurrentProcessId CreateProcessW GetExitCodeProcess GetLogicalDriveStringsW FormatMessageW FileTimeToSystemTime SetEvent GetTickCount GetACP GlobalMemoryStatusEx InterlockedExchange SetLastError InterlockedExchangeAdd InitializeCriticalSectionAndSpinCount SwitchToThread GetCommandLineW ExitThread FreeLibraryAndExitThread GetTimeZoneInformation InitializeCriticalSection DeviceIoControl ResetEvent CreateEventW ResumeThread GetEnvironmentVariableW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA OutputDebugStringW CreateThread SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc SetFilePointerEx WriteConsoleW DecodePointer

shell32

CommandLineToArgvW SHGetFolderPathW SHGetSpecialFolderPathW

Sharing

General

Malware Config

Signatures

File Explorer

3610e424061338c41ebface3f350a9fc0274a1c8f4f81a97ad71989ff4509fcd

kernel32

shell32

generic