91d9c4b5eb2d119f856031e8f733658f934340f4865733422ef99ece77965858

General

Target
91d9c4b5eb2d119f856031e8f733658f934340f4865733422ef99ece77965858
Size 333KB
Sample240601-nwec1sbe3t
SHA256 91d9c4b5eb2d119f856031e8f733658f934340f4865733422ef99ece77965858
MD5 ce90de5aab588ce16ca3906a31dc9aa3
SHA1 7b127a19608939c62b14e5b11087e507b73b9440
SHA512 fd06dea41661774c0ddaf881ab52bd661fdc85389ce88b44a1dd84983416b3996286bb0d287aa27d594517a589d063d60ac0dc348c2dee5042513548264c9a23
SSDEEP 6144:XdLCihw97GN/br2sIJ+NgftHbZqJbpV0:tHhaG5r2Ljm5p+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91d9c4b5eb2d119f856031e8f733658f934340f4865733422ef99ece77965858

File Explorer

91d9c4b5eb2d119f856031e8f733658f934340f4865733422ef99ece77965858

.exe 333KB

91d9c4b5eb2d119f856031e8f733658f934340f4865733422ef99ece77965858

IMPHASH 0d8269b0834154cb65ca1c250b7b19ee
SHA256 91d9c4b5eb2d119f856031e8f733658f934340f4865733422ef99ece77965858
MD5 ce90de5aab588ce16ca3906a31dc9aa3
SHA1 7b127a19608939c62b14e5b11087e507b73b9440
SHA512 fd06dea41661774c0ddaf881ab52bd661fdc85389ce88b44a1dd84983416b3996286bb0d287aa27d594517a589d063d60ac0dc348c2dee5042513548264c9a23
SSDEEP 6144:XdLCihw97GN/br2sIJ+NgftHbZqJbpV0:tHhaG5r2Ljm5p+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5887

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement ZombifyActCtx GetComputerNameW GetTimeFormatA FreeEnvironmentStringsA GetModuleHandleW EnumTimeFormatsW InterlockedPopEntrySList SetConsoleMode GetFileAttributesW GetModuleFileNameW SetUnhandledExceptionFilter GetShortPathNameA GetConsoleAliasesW SetLastError GetProcAddress BackupWrite LocalLock LoadLibraryA GetFileType HeapWalk SetConsoleTitleW BuildCommDCBA LocalFileTimeToFileTime TryEnterCriticalSection WriteConsoleOutputW CompareStringW GlobalDeleteAtom CreateFileA HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetLastError TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize GetLocaleInfoA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle

gdi32

GetCharWidth32W

advapi32

OpenProcessToken

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

91d9c4b5eb2d119f856031e8f733658f934340f4865733422ef99ece77965858

kernel32

gdi32

advapi32

winhttp

generic