3395fb9c54fc3cab81bafb3d300db21e87985471b589860f9587b54fc968d995

Sharing

Copy URL Twitter E-mail

General

Target
3395fb9c54fc3cab81bafb3d300db21e87985471b589860f9587b54fc968d995
Size 341KB
Sample240607-afl62aeb5s
SHA256 3395fb9c54fc3cab81bafb3d300db21e87985471b589860f9587b54fc968d995
MD5 e1204a6e1d755894a6ee364d361c06f4
SHA1 3bac076f6ae811dd35d398b707b1cae8e88199f6
SHA512 8d4715a92e3da6be6b9a2911c100de35a412cb3b25e1029fd43740a5fd223bc8bef98aa171cbdfc2fa1438141bac7e32b657769f9d259f70c0c47473b26c6650
SSDEEP 6144:S+MYEMnAjQVc077KY84L8ZGK/++fY1wyOnwaT:IYEMA0cqj8jZNSNOwK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3395fb9c54fc3cab81bafb3d300db21e87985471b589860f9587b54fc968d995

File Explorer

3395fb9c54fc3cab81bafb3d300db21e87985471b589860f9587b54fc968d995

.exe 341KB

3395fb9c54fc3cab81bafb3d300db21e87985471b589860f9587b54fc968d995

IMPHASH e0fb7ac95b05e6ffe1524786d339bd6f
SHA256 3395fb9c54fc3cab81bafb3d300db21e87985471b589860f9587b54fc968d995
MD5 e1204a6e1d755894a6ee364d361c06f4
SHA1 3bac076f6ae811dd35d398b707b1cae8e88199f6
SHA512 8d4715a92e3da6be6b9a2911c100de35a412cb3b25e1029fd43740a5fd223bc8bef98aa171cbdfc2fa1438141bac7e32b657769f9d259f70c0c47473b26c6650
SSDEEP 6144:S+MYEMnAjQVc077KY84L8ZGK/++fY1wyOnwaT:IYEMA0cqj8jZNSNOwK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SizeofResource GetCalendarInfoA GetModuleFileNameW lstrcatA QueryInformationJobObject GetACP IsBadStringPtrA GetLastError SetLastError GetProcAddress SetComputerNameA SetFileAttributesA LoadLibraryA FindFirstVolumeMountPointW OpenEventA GetDiskFreeSpaceA GetDefaultCommConfigA LoadLibraryExA BuildCommDCBA VirtualProtect GetWindowsDirectoryW AddConsoleAliasA WriteProcessMemory CreateFileW CloseHandle WriteConsoleW OutputDebugStringW GetConsoleCP FlushFileBuffers SetStdHandle GetConsoleMode GlobalAlloc TzSpecificLocalTimeToSystemTime GetUserDefaultLangID GetTickCount GetNumberFormatA GetSystemDefaultLCID InterlockedCompareExchange CreateDirectoryW FoldStringA SetConsoleTextAttribute LoadLibraryExW GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId WideCharToMultiByte MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapFree HeapReAlloc GetCommandLineW GetCPInfo RaiseException RtlUnwind HeapAlloc IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW LCMapStringW GetProcessHeap ExitProcess GetModuleHandleExW HeapSize IsDebuggerPresent GetStdHandle GetFileType GetCurrentThreadId ReadFile SetFilePointerEx WriteFile QueryPerformanceCounter

user32

DrawCaption CloseWindow DdeQueryStringA DdeCmpStringHandles SetUserObjectSecurity LoadMenuW GetWindowTextLengthA GetKeyNameTextA

gdi32

GetCharacterPlacementW DeleteMetaFile GetTextMetricsA GetPixelFormat

advapi32

ReadEventLogW DeregisterEventSource RegisterEventSourceW ReadEventLogA

ole32

CoGetClassObject CoMarshalHresult CoRegisterPSClsid

winhttp

WinHttpCheckPlatform WinHttpSetDefaultProxyConfiguration WinHttpWriteData

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

3395fb9c54fc3cab81bafb3d300db21e87985471b589860f9587b54fc968d995

kernel32

user32

gdi32

advapi32

ole32

winhttp

msimg32

generic