1e60fcf76b03d541f554af9565d0e3c01b12cac9db5a4828150b65e013048786

Sharing

Copy URL Twitter E-mail

General

Target
1e60fcf76b03d541f554af9565d0e3c01b12cac9db5a4828150b65e013048786
Size 343KB
Sample240603-lbfz1abb96
SHA256 1e60fcf76b03d541f554af9565d0e3c01b12cac9db5a4828150b65e013048786
MD5 7164d65ffac6247472bac63839afccca
SHA1 8461d238eb44186cd5d4f721cec110385d2c0477
SHA512 903b59d82c2e08c3fa77ec755244fe545a009b32e00da2030ea9887d38fdd69397991900833c45b53e25cb216fdd213b3ac9c8a1eb9aeb1aebf4baa043249405
SSDEEP 3072:7l6jx6dB+Nryg2Y/SGX6nHEXlWj+0Isbbhw1cVcPF81UgM9qxzgha/bXCva7//Pm:a6dw6iKH7813N81Isxnjh7nPIX9apT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e60fcf76b03d541f554af9565d0e3c01b12cac9db5a4828150b65e013048786

File Explorer

1e60fcf76b03d541f554af9565d0e3c01b12cac9db5a4828150b65e013048786

.exe 343KB

1e60fcf76b03d541f554af9565d0e3c01b12cac9db5a4828150b65e013048786

IMPHASH f557b9e8f3f146c02a01e61ab444a236
SHA256 1e60fcf76b03d541f554af9565d0e3c01b12cac9db5a4828150b65e013048786
MD5 7164d65ffac6247472bac63839afccca
SHA1 8461d238eb44186cd5d4f721cec110385d2c0477
SHA512 903b59d82c2e08c3fa77ec755244fe545a009b32e00da2030ea9887d38fdd69397991900833c45b53e25cb216fdd213b3ac9c8a1eb9aeb1aebf4baa043249405
SSDEEP 3072:7l6jx6dB+Nryg2Y/SGX6nHEXlWj+0Isbbhw1cVcPF81UgM9qxzgha/bXCva7//Pm:a6dw6iKH7813N81Isxnjh7nPIX9apT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadProcessMemory GetTickCount _lopen OpenEventA LoadLibraryA LoadLibraryExW GetModuleFileNameA GetModuleHandleA GetWindowsDirectoryA CreateDirectoryW SetFileAttributesW GetVolumeInformationA IsBadStringPtrA SetLastError SetComputerNameA SetInformationJobObject FindFirstVolumeMountPointW GetOEMCP GetCalendarInfoA GetNumberFormatA GetStringTypeA SetConsoleCursorInfo SetConsoleTextAttribute AddConsoleAliasA ReadConsoleW ReadFile SetEndOfFile WriteConsoleW GetLastError LocalAlloc BuildCommDCBA GetProcAddress SetStdHandle CloseHandle WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer HeapFree RaiseException RtlUnwind GetCommandLineW GetCPInfo HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize GetProcessHeap IsDebuggerPresent GetCurrentThreadId GetStdHandle GetFileType GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetACP HeapReAlloc OutputDebugStringW GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers CreateFileW

user32

DdeCmpStringHandles GetSysColorBrush GetMenu

gdi32

GetCharWidthA

advapi32

ClearEventLogA DeleteAce

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

1e60fcf76b03d541f554af9565d0e3c01b12cac9db5a4828150b65e013048786

kernel32

user32

gdi32

advapi32

winhttp

generic