dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68

General

Target
dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68
Size 307KB
Sample240531-prxt8shf57
SHA256 dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68
MD5 9dc3f76bae48a8f7602b725f5fd7ce06
SHA1 373408e6d800ed4404f10a391fa5718a5c88db21
SHA512 442451bb8ce061ded8097e65ebdb9c446e748eca9840bbd205bfbb86fd07e9b0dd7e4fc28547ab7b1b3410525de6f6bae2841eb40fed40752311cb3217e8ffce
SSDEEP 3072:gYiuYbrWfxnSql2W4vtwsCss1YyX/I3oBXoD/hu1tN05MFB8sFB8Th:gxbqSq2W4FWX13u3u1T0h
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68

File Explorer

dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68

.exe 307KB

dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68

IMPHASH e9441ffec23b89f8e08ca6b5c500d8fe
SHA256 dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68
MD5 9dc3f76bae48a8f7602b725f5fd7ce06
SHA1 373408e6d800ed4404f10a391fa5718a5c88db21
SHA512 442451bb8ce061ded8097e65ebdb9c446e748eca9840bbd205bfbb86fd07e9b0dd7e4fc28547ab7b1b3410525de6f6bae2841eb40fed40752311cb3217e8ffce
SSDEEP 3072:gYiuYbrWfxnSql2W4vtwsCss1YyX/I3oBXoD/hu1tN05MFB8sFB8Th:gxbqSq2W4FWX13u3u1T0h
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4631

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetTimeFormatA GetModuleHandleW EnumTimeFormatsW WriteConsoleOutputA InterlockedPopEntrySList SetConsoleMode GetConsoleAliasW GetFileAttributesW GetModuleFileNameW GetShortPathNameA GetConsoleAliasesW SetLastError ZombifyActCtx GetLongPathNameA BackupWrite LocalLock LoadLibraryA UnhandledExceptionFilter HeapLock SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA CompareStringA FileTimeToLocalFileTime GetFileInformationByHandle TryEnterCriticalSection InterlockedDecrement GetProcAddress GlobalDeleteAtom GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

gdi32

GetCharWidth32W

advapi32

OpenThreadToken

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68

kernel32

gdi32

advapi32

winhttp

generic