fca08db0fdad2ac7cce687b108a31f9f7f8f5713a7626e556f16a580d653b597

General

Target
fca08db0fdad2ac7cce687b108a31f9f7f8f5713a7626e556f16a580d653b597
Size 814KB
Sample240528-sr2pzabc42
SHA256 fca08db0fdad2ac7cce687b108a31f9f7f8f5713a7626e556f16a580d653b597
MD5 e3cdd6c9d4cb29d2665fa20f4111a9d9
SHA1 5645c03cb29313a4e514a018e724f70825f37f65
SHA512 6eaf4c8201abbbd0307313ce1c0c0231e90e1d80dc920e2597c576023c58131f4a48903ce579cc95f7d75790854220b41bebb84a3633fca32037f9e476a3b5f3
SSDEEP 12288:LutJ8/wjjYevFQ29QNWgHtYk8DqwxZL9I+tYiY97eWjocWZx:kHYaS/69X7GiuLt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fca08db0fdad2ac7cce687b108a31f9f7f8f5713a7626e556f16a580d653b597

File Explorer

fca08db0fdad2ac7cce687b108a31f9f7f8f5713a7626e556f16a580d653b597

.exe 814KB

fca08db0fdad2ac7cce687b108a31f9f7f8f5713a7626e556f16a580d653b597

IMPHASH 8f3a77672c54b3a823c7128091b9055b
SHA256 fca08db0fdad2ac7cce687b108a31f9f7f8f5713a7626e556f16a580d653b597
MD5 e3cdd6c9d4cb29d2665fa20f4111a9d9
SHA1 5645c03cb29313a4e514a018e724f70825f37f65
SHA512 6eaf4c8201abbbd0307313ce1c0c0231e90e1d80dc920e2597c576023c58131f4a48903ce579cc95f7d75790854220b41bebb84a3633fca32037f9e476a3b5f3
SSDEEP 12288:LutJ8/wjjYevFQ29QNWgHtYk8DqwxZL9I+tYiY97eWjocWZx:kHYaS/69X7GiuLt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16087

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalAlloc GetLastError SetLastError ReadProcessMemory GetTickCount _lopen OpenEventA LoadLibraryW LoadLibraryExW GetModuleFileNameW GetModuleHandleW GetSystemDirectoryW CreateDirectoryA SetFileAttributesW GetVolumeInformationA GetProcAddress BuildCommDCBA CommConfigDialogA SetComputerNameExA SetInformationJobObject FindNextVolumeA SetVolumeMountPointA GetACP GetLocaleInfoA GetNumberFormatA GetStringTypeW SetConsoleCursorInfo AllocConsole AddConsoleAliasW CloseHandle WriteConsoleW SetFilePointerEx IsBadStringPtrA InterlockedExchange EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineW IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsDebuggerPresent LCMapStringW EnterCriticalSection LeaveCriticalSection IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc OutputDebugStringW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle CreateFileW

user32

GetSysColorBrush DdeKeepStringHandle

gdi32

GetCharWidthA

Sharing

General

Malware Config

Signatures

File Explorer

fca08db0fdad2ac7cce687b108a31f9f7f8f5713a7626e556f16a580d653b597

kernel32

user32

gdi32

generic