35e841871ccca128fb5aeb5c4011cd55cf189525dba461fd8c09e7583bc84004

General

Target
35e841871ccca128fb5aeb5c4011cd55cf189525dba461fd8c09e7583bc84004
Size 1.4MB
Sample240527-pcmqqacd43
SHA256 35e841871ccca128fb5aeb5c4011cd55cf189525dba461fd8c09e7583bc84004
MD5 548f9e15d487e829f3aa386d22199f97
SHA1 8e6d550d7db29fd6fa5a303580c41c5af9036639
SHA512 9dd4d866906cd05e3c368b6779769fd3ccd34763f4456b8f9feddecde2d09f537d27b8d16a65f64b57157ad4c60da27497f908ed811c0d679c17eaafe97ae65b
SSDEEP 24576:IkCKAB//TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:IxKk/LNiXicJFFRGNzj3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35e841871ccca128fb5aeb5c4011cd55cf189525dba461fd8c09e7583bc84004

File Explorer

35e841871ccca128fb5aeb5c4011cd55cf189525dba461fd8c09e7583bc84004

.exe 1.4MB

35e841871ccca128fb5aeb5c4011cd55cf189525dba461fd8c09e7583bc84004

IMPHASH b696542cade53789c2cbed09ce287013
SHA256 35e841871ccca128fb5aeb5c4011cd55cf189525dba461fd8c09e7583bc84004
MD5 548f9e15d487e829f3aa386d22199f97
SHA1 8e6d550d7db29fd6fa5a303580c41c5af9036639
SHA512 9dd4d866906cd05e3c368b6779769fd3ccd34763f4456b8f9feddecde2d09f537d27b8d16a65f64b57157ad4c60da27497f908ed811c0d679c17eaafe97ae65b
SSDEEP 24576:IkCKAB//TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:IxKk/LNiXicJFFRGNzj3
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

30034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EncodePointer ExitProcess GetModuleHandleExW GetStdHandle WriteFile FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetFileType WriteConsoleW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

35e841871ccca128fb5aeb5c4011cd55cf189525dba461fd8c09e7583bc84004

advapi32

kernel32

shell32

user32

shlwapi

generic