a914213263430f2f806da50820fa6d7bafd83cec13d7585ff37fd400e24d2106

General

Target
a914213263430f2f806da50820fa6d7bafd83cec13d7585ff37fd400e24d2106
Size 1.6MB
Sample240603-kfqvbsae28
SHA256 a914213263430f2f806da50820fa6d7bafd83cec13d7585ff37fd400e24d2106
MD5 81aabc4e83c3bd32312def4d5ba027e3
SHA1 e5fda634b2445a1b56d2e60cee5c74adb89b6967
SHA512 7461611936fca678f91a1850bf027361eb181a32dad9d8382063d142d8751ae0f0ef6390b3b68d8046792ba725d6070b415f404af9c7aaaa75f88bf72ca86ca3
SSDEEP 24576:Ch9Bm82kDZJfwjBfw6IRuL1ZZMAz2jCd:CBm8RdJ4jdR/2jC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a914213263430f2f806da50820fa6d7bafd83cec13d7585ff37fd400e24d2106

File Explorer

a914213263430f2f806da50820fa6d7bafd83cec13d7585ff37fd400e24d2106

.exe 1.6MB

a914213263430f2f806da50820fa6d7bafd83cec13d7585ff37fd400e24d2106

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 a914213263430f2f806da50820fa6d7bafd83cec13d7585ff37fd400e24d2106
MD5 81aabc4e83c3bd32312def4d5ba027e3
SHA1 e5fda634b2445a1b56d2e60cee5c74adb89b6967
SHA512 7461611936fca678f91a1850bf027361eb181a32dad9d8382063d142d8751ae0f0ef6390b3b68d8046792ba725d6070b415f404af9c7aaaa75f88bf72ca86ca3
SSDEEP 24576:Ch9Bm82kDZJfwjBfw6IRuL1ZZMAz2jCd:CBm8RdJ4jdR/2jC
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

a914213263430f2f806da50820fa6d7bafd83cec13d7585ff37fd400e24d2106

advapi32

kernel32

shell32

user32

shlwapi

generic