db80fe864b6e9fc64be43b0115da8dedcaca4e94021b871dd433bd67b3e272d0

General

Target
db80fe864b6e9fc64be43b0115da8dedcaca4e94021b871dd433bd67b3e272d0
Size 792KB
Sample240530-fa8ezafa2v
SHA256 db80fe864b6e9fc64be43b0115da8dedcaca4e94021b871dd433bd67b3e272d0
MD5 20993754a99d0079eb09d268a7ae0152
SHA1 0b8f94f30db044fe623901c2ebaad1473a6914a3
SHA512 cdd4c6207b24528ba0509d8dd9863b9db5d812239d2e06befee3bc1ba9328707cb6337e0f713b1de24d2c1e17dfe3ad7ecf1374e676e5f8bbd8ba3a39d72d27a
SSDEEP 12288:mBi4YSFa34Zi/59I7BL/E4Zo737v9ZH+2PMUPuaqamsXQIP2veGorj+AKJspS0Uu:GYSFaImq7vof9ZH+kBzbmsRo46AScfK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db80fe864b6e9fc64be43b0115da8dedcaca4e94021b871dd433bd67b3e272d0

File Explorer

db80fe864b6e9fc64be43b0115da8dedcaca4e94021b871dd433bd67b3e272d0

.exe 792KB

db80fe864b6e9fc64be43b0115da8dedcaca4e94021b871dd433bd67b3e272d0

IMPHASH 9ee5e49c70108221de26c67144570417
SHA256 db80fe864b6e9fc64be43b0115da8dedcaca4e94021b871dd433bd67b3e272d0
MD5 20993754a99d0079eb09d268a7ae0152
SHA1 0b8f94f30db044fe623901c2ebaad1473a6914a3
SHA512 cdd4c6207b24528ba0509d8dd9863b9db5d812239d2e06befee3bc1ba9328707cb6337e0f713b1de24d2c1e17dfe3ad7ecf1374e676e5f8bbd8ba3a39d72d27a
SSDEEP 12288:mBi4YSFa34Zi/59I7BL/E4Zo737v9ZH+2PMUPuaqamsXQIP2veGorj+AKJspS0Uu:GYSFaImq7vof9ZH+kBzbmsRo46AScfK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode InterlockedDecrement GetComputerNameW GetTimeFormatA GetModuleHandleW EnumTimeFormatsA ActivateActCtx ReadFileScatter WriteConsoleOutputA InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetConsoleAliasW GetModuleFileNameW TryEnterCriticalSection GetConsoleAliasesW SetLastError GetProcAddress GetLongPathNameA GetProcessHeaps LocalLock LoadLibraryA UnhandledExceptionFilter FreeEnvironmentStringsW BuildCommDCBA CompareStringA GetShortPathNameW GetFileInformationByHandle LocalFileTimeToFileTime SetConsoleTitleA GlobalDeleteAtom MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError HeapAlloc HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidth32W

Sharing

General

Malware Config

Signatures

File Explorer

db80fe864b6e9fc64be43b0115da8dedcaca4e94021b871dd433bd67b3e272d0

kernel32

gdi32

generic