77a8edbd9c57001aa4c323967e132cedef0dc381b8f7c9403edfd0aed3372f78

General

Target
77a8edbd9c57001aa4c323967e132cedef0dc381b8f7c9403edfd0aed3372f78
Size 250KB
Sample240601-2dgmbagh4w
SHA256 77a8edbd9c57001aa4c323967e132cedef0dc381b8f7c9403edfd0aed3372f78
MD5 409fdd84a11e13644629dbd5eb2e3334
SHA1 61eef261addb6bee4145d777904f862dd156b4c6
SHA512 9ba34813b8d4bf53ba6fb80095ba1461efd08cc9e2df806656b72130fe069ec984583a4219dcb3bda55db15c770a7b5be157353ba7e6d62ab6f672a88d850a91
SSDEEP 6144:7Qg8/MU3K/k5X5bdEC+uKFC9ZH9ot2Z93TWwi23vadQ:7pUskZ5GChKoHm8N3vz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1.exe

File Explorer

77a8edbd9c57001aa4c323967e132cedef0dc381b8f7c9403edfd0aed3372f78

.zip 250KB
b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1.exe

.exe 323KB

77a8edbd9c57001aa4c323967e132cedef0dc381b8f7c9403edfd0aed3372f78

SHA256 77a8edbd9c57001aa4c323967e132cedef0dc381b8f7c9403edfd0aed3372f78
MD5 409fdd84a11e13644629dbd5eb2e3334
SHA1 61eef261addb6bee4145d777904f862dd156b4c6
SHA512 9ba34813b8d4bf53ba6fb80095ba1461efd08cc9e2df806656b72130fe069ec984583a4219dcb3bda55db15c770a7b5be157353ba7e6d62ab6f672a88d850a91
SSDEEP 6144:7Qg8/MU3K/k5X5bdEC+uKFC9ZH9ot2Z93TWwi23vadQ:7pUskZ5GChKoHm8N3vz
MD5 SHA1 SHA512 SSDEEP

Password

infected

b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1.exe

IMPHASH 37b83adc183001c9e38660b73f251c40
SHA256 b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1
MD5 dd9758ebd7858c5e4248e47f82514243
SHA1 44201e36915103cfd9ae7501554574c786ad9750
SHA512 b5832cdaf7446aab2c2d98df836a079d3db8eb89442dc3fbb1a7bf2fa0cea54144f9459ed72b185fd541272e50df283253db8b9fa36d7431c542a32175df69b2
SSDEEP 6144:xPG/b9ZPMf05F63x6/47sdQNpKgtgmulMxPeZ40:xG/J1F8x6/4odUpBifCeq0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount TzSpecificLocalTimeToSystemTime WriteConsoleW GetSystemDirectoryA SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress LoadLibraryA GetConsoleAliasA GetNumberFormatW CreateEventW RemoveDirectoryW GetModuleFileNameA BuildCommDCBA VirtualProtect PurgeComm SetFileAttributesW GetVolumeInformationW CloseHandle CreateFileW GetStringTypeW LocalAlloc LoadLibraryExW OutputDebugStringW GetConsoleCP IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection HeapFree ReadFile SetFilePointerEx DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleMode ReadConsoleW SetStdHandle FlushFileBuffers SetEndOfFile

user32

GetMenuItemID ChangeDisplaySettingsW

gdi32

GetCharWidthI

ole32

CoMarshalHresult

Sharing

General

Malware Config

Signatures

File Explorer

77a8edbd9c57001aa4c323967e132cedef0dc381b8f7c9403edfd0aed3372f78

b230e0a5f9c66371981e70ce3586b23c0dc61f69a5274a831d692fa4e980b2e1.exe

kernel32

user32

gdi32

ole32

generic