c129c6a4181608254be4c12230876dc7599f069859423690a03cdc6faa54ce32

General

Target
c129c6a4181608254be4c12230876dc7599f069859423690a03cdc6faa54ce32
Size 810KB
Sample240529-fech4abg86
SHA256 c129c6a4181608254be4c12230876dc7599f069859423690a03cdc6faa54ce32
MD5 9060623837cb380cb91eea124ec36e64
SHA1 45294966e7274b1f9448a63210c9182767cc68e0
SHA512 895e81e204468776d92ae1e1993dcb5a40b78b4fe23dc42d8d29ceaba9636bcf38c55ea52e3477e575c0973a3d63477f09a9f758d07bfe9063aa801c8be886d4
SSDEEP 12288:86xyOASU7AndBpO3Vn/zJmbSye7fpDdzlVBy9sRk/6lJSVil5wMtPrRLmWVoCAaB:LuF0dIV/zJWGpxzlNq/6lJuAttLmzK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c129c6a4181608254be4c12230876dc7599f069859423690a03cdc6faa54ce32

File Explorer

c129c6a4181608254be4c12230876dc7599f069859423690a03cdc6faa54ce32

.exe 810KB

c129c6a4181608254be4c12230876dc7599f069859423690a03cdc6faa54ce32

IMPHASH 34c537f38debb92cf9af92f26e116bb7
SHA256 c129c6a4181608254be4c12230876dc7599f069859423690a03cdc6faa54ce32
MD5 9060623837cb380cb91eea124ec36e64
SHA1 45294966e7274b1f9448a63210c9182767cc68e0
SHA512 895e81e204468776d92ae1e1993dcb5a40b78b4fe23dc42d8d29ceaba9636bcf38c55ea52e3477e575c0973a3d63477f09a9f758d07bfe9063aa801c8be886d4
SSDEEP 12288:86xyOASU7AndBpO3Vn/zJmbSye7fpDdzlVBy9sRk/6lJSVil5wMtPrRLmWVoCAaB:LuF0dIV/zJWGpxzlNq/6lJuAttLmzK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16167

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchange GetProcAddress LocalAlloc GetLastError SetLastError ReadProcessMemory GetTickCount _lopen OpenEventA LoadLibraryW LoadLibraryExA GetModuleFileNameW GetModuleHandleA GetSystemDirectoryW CreateDirectoryW SetFileAttributesW GetVolumeInformationW IsBadStringPtrA BuildCommDCBW CommConfigDialogA SetComputerNameA SetInformationJobObject FindNextVolumeA FindNextVolumeMountPointW SetVolumeMountPointA GetOEMCP GetCalendarInfoA GetNumberFormatA GetStringTypeA SetConsoleCursorInfo SetConsoleWindowInfo AddConsoleAliasW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineW IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent LCMapStringW EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetACP GetCPInfo HeapReAlloc OutputDebugStringW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode CreateFileW

user32

GetSysColorBrush SetMenu DdeFreeStringHandle

Sharing

General

Malware Config

Signatures

File Explorer

c129c6a4181608254be4c12230876dc7599f069859423690a03cdc6faa54ce32

kernel32

user32

generic