cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170

General

Target
cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170
Size 2.6MB
Sample240607-b3bjgsfe2v
SHA256 cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170
MD5 d86ff3c02aefcd74ece7eb45ee226806
SHA1 43749f2e4303daa222ffa6af7297a07e62b55b70
SHA512 36abc197f3f3e10c2495633a95e4ba69a1362a77beff7cb3f2e9aee525040d72fd7ea76b1f4b1fe07146edf3dbb3905c94fd96a34a74d3b0e3c6f60a8f00daab
SSDEEP 49152:dI1+AV/nH+LZTiRDmIzov0aEEWXr/m0ce6XjX04LbfQyXhZzByPfP11X/RaPWJhq:dI1+Q/HgliRD1C0a925ceIjX/bfQyXzg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170

File Explorer

cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170

.exe 2.6MB

cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170

IMPHASH fec98778e46bf1d6aed3f9ad74a5bb8d
SHA256 cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170
MD5 d86ff3c02aefcd74ece7eb45ee226806
SHA1 43749f2e4303daa222ffa6af7297a07e62b55b70
SHA512 36abc197f3f3e10c2495633a95e4ba69a1362a77beff7cb3f2e9aee525040d72fd7ea76b1f4b1fe07146edf3dbb3905c94fd96a34a74d3b0e3c6f60a8f00daab
SSDEEP 49152:dI1+AV/nH+LZTiRDmIzov0aEEWXr/m0ce6XjX04LbfQyXhZzByPfP11X/RaPWJhq:dI1+Q/HgliRD1C0a925ceIjX/bfQyXzg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

25878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetNumberOfEventLogRecords

kernel32

VirtualAlloc WaitForSingleObjectEx CloseHandle FreeConsole CreateThread QueryPerformanceCounter QueryPerformanceFrequency WideCharToMultiByte GetCurrentThreadId ReleaseSRWLockExclusive Sleep GetExitCodeThread InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx WakeAllConditionVariable GetStringTypeW GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170

advapi32

kernel32

generic