abf62e3b81492e2f317745f018f569b36bc8c6322c205d74ff72fda3a0adf139

General

Target
abf62e3b81492e2f317745f018f569b36bc8c6322c205d74ff72fda3a0adf139
Size 791KB
Sample240529-s3ygpabd89
SHA256 abf62e3b81492e2f317745f018f569b36bc8c6322c205d74ff72fda3a0adf139
MD5 7e757f9cbab5888783a4fd47505e1545
SHA1 0540526f08a8580dc4ef120b10fad767364af1b1
SHA512 da8224fb54b2ff692aed76cd49e2c8bbb8a11ffca58bcf48606e1e8396948693f9107d619c97f019c4e0acd425ed35e3851948d2f41dd84fcb897741b60b6760
SSDEEP 12288:3np5gTpUK81TioQkv4BDrvcVenLNUjYbqtQDzrSP0gjsOit+02wj:3np5gTOX1Ti8wB3XnR1zesgriY02wj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abf62e3b81492e2f317745f018f569b36bc8c6322c205d74ff72fda3a0adf139

File Explorer

abf62e3b81492e2f317745f018f569b36bc8c6322c205d74ff72fda3a0adf139

.exe 791KB

abf62e3b81492e2f317745f018f569b36bc8c6322c205d74ff72fda3a0adf139

IMPHASH b3f7368a77856522320ff0e8d452c570
SHA256 abf62e3b81492e2f317745f018f569b36bc8c6322c205d74ff72fda3a0adf139
MD5 7e757f9cbab5888783a4fd47505e1545
SHA1 0540526f08a8580dc4ef120b10fad767364af1b1
SHA512 da8224fb54b2ff692aed76cd49e2c8bbb8a11ffca58bcf48606e1e8396948693f9107d619c97f019c4e0acd425ed35e3851948d2f41dd84fcb897741b60b6760
SSDEEP 12288:3np5gTpUK81TioQkv4BDrvcVenLNUjYbqtQDzrSP0gjsOit+02wj:3np5gTOX1Ti8wB3XnR1zesgriY02wj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalDeleteAtom TryEnterCriticalSection GetNumaProcessorNode InterlockedDecrement GetComputerNameW GetTimeFormatA GetModuleHandleW EnumTimeFormatsA ActivateActCtx ReadFileScatter WriteConsoleOutputA InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetConsoleAliasW GetModuleFileNameW SetConsoleTitleA GetConsoleAliasesW SetLastError GetProcAddress GetProcessHeaps LocalLock LoadLibraryA UnhandledExceptionFilter FreeEnvironmentStringsW BuildCommDCBA CompareStringA GetShortPathNameW GetFileInformationByHandle LocalFileTimeToFileTime MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

abf62e3b81492e2f317745f018f569b36bc8c6322c205d74ff72fda3a0adf139

kernel32

generic