351b344111dcb9eeb71d842b98bc401682554d1d084f4381e147d1cf1a2fe363

General

Target
351b344111dcb9eeb71d842b98bc401682554d1d084f4381e147d1cf1a2fe363
Size 257KB
Sample240530-2pfjdsce2y
SHA256 351b344111dcb9eeb71d842b98bc401682554d1d084f4381e147d1cf1a2fe363
MD5 f42b2eb64aadd1f848b27084c21afe69
SHA1 f8c5d2e5f83e09eb45bfb6ef1c55f525f78a3057
SHA512 402675502834bdd20815769f0dae77d4eba1cf65e5c13cb3059340d12a77ce940c51bbb586226e974c37b3277754c417fc4d711b810ae058e7a39b172bb5d427
SSDEEP 3072:789/YgfGfXwnVV6hHP61tMdpJGPAtFFZ5Ofqs9T5eLuV/:787lV6hy1tMdvOCFk7TwLi/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
351b344111dcb9eeb71d842b98bc401682554d1d084f4381e147d1cf1a2fe363

File Explorer

351b344111dcb9eeb71d842b98bc401682554d1d084f4381e147d1cf1a2fe363

.exe 257KB

351b344111dcb9eeb71d842b98bc401682554d1d084f4381e147d1cf1a2fe363

IMPHASH c645f4d9841dbc2363e547e7e5247f91
SHA256 351b344111dcb9eeb71d842b98bc401682554d1d084f4381e147d1cf1a2fe363
MD5 f42b2eb64aadd1f848b27084c21afe69
SHA1 f8c5d2e5f83e09eb45bfb6ef1c55f525f78a3057
SHA512 402675502834bdd20815769f0dae77d4eba1cf65e5c13cb3059340d12a77ce940c51bbb586226e974c37b3277754c417fc4d711b810ae058e7a39b172bb5d427
SSDEEP 3072:789/YgfGfXwnVV6hHP61tMdpJGPAtFFZ5Ofqs9T5eLuV/:787lV6hy1tMdvOCFk7TwLi/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA InterlockedDecrement FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA EnumTimeFormatsW ActivateActCtx ReadFileScatter WriteConsoleOutputA InitAtomTable InterlockedPopEntrySList GetFileAttributesA SetConsoleMode LocalReAlloc GetModuleFileNameW CompareStringW SetConsoleTitleA RaiseException GetConsoleAliasesW SetLastError GetProcAddress GetProcessHeaps BuildCommDCBW LoadLibraryA UnhandledExceptionFilter DeleteCriticalSection GetShortPathNameW SetCalendarInfoA LocalFileTimeToFileTime GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

351b344111dcb9eeb71d842b98bc401682554d1d084f4381e147d1cf1a2fe363

kernel32

generic