dd1380805c9f165a1c4ed1c2be6f21c2ddff3152a816246744ae3150f43c5fef

General

Target
dd1380805c9f165a1c4ed1c2be6f21c2ddff3152a816246744ae3150f43c5fef
Size 322KB
Sample240607-j6fxdadb5s
SHA256 dd1380805c9f165a1c4ed1c2be6f21c2ddff3152a816246744ae3150f43c5fef
MD5 a91b2c191341a5cdaee48108df0b5036
SHA1 60031084704a8bc2ec0300170b3505bee9d1b74a
SHA512 5a221d7c04989341042c11fae68a5d664a32c02664a722a376c9504e01a67c53a050e9fc2067d9f90414be616a2a1ac4a4e9dcff25eb3852c28f25a04915061a
SSDEEP 3072:OsELu3lHXE7Uop/QWNcPwJ9HIcJ7IMnjKzXc+ntlIjd25vmwJhX:OHLu3l3EBY2coj79IM8M+ntjzP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd1380805c9f165a1c4ed1c2be6f21c2ddff3152a816246744ae3150f43c5fef

File Explorer

dd1380805c9f165a1c4ed1c2be6f21c2ddff3152a816246744ae3150f43c5fef

.exe 322KB

dd1380805c9f165a1c4ed1c2be6f21c2ddff3152a816246744ae3150f43c5fef

IMPHASH 6badca7d2cdb1d079ef4664620060142
SHA256 dd1380805c9f165a1c4ed1c2be6f21c2ddff3152a816246744ae3150f43c5fef
MD5 a91b2c191341a5cdaee48108df0b5036
SHA1 60031084704a8bc2ec0300170b3505bee9d1b74a
SHA512 5a221d7c04989341042c11fae68a5d664a32c02664a722a376c9504e01a67c53a050e9fc2067d9f90414be616a2a1ac4a4e9dcff25eb3852c28f25a04915061a
SSDEEP 3072:OsELu3lHXE7Uop/QWNcPwJ9HIcJ7IMnjKzXc+ntlIjd25vmwJhX:OHLu3l3EBY2coj79IM8M+ntjzP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement CreateJobObjectW GetTimeFormatA GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesLengthA FormatMessageA GetSystemTimes LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW FindNextVolumeW GetConsoleAliasW SetTimeZoneInformation FileTimeToSystemTime GetModuleFileNameW SetConsoleTitleA RaiseException EnumCalendarInfoW GetConsoleAliasesW SetLastError GetThreadLocale GetProcAddress SetVolumeLabelW VerLanguageNameW BuildCommDCBW LoadLibraryA LocalAlloc SetConsoleOutputCP GetProcessAffinityMask PurgeComm EnumDateFormatsW CompareStringA DeleteCriticalSection DeleteAtom OpenFileMappingA GetStringTypeExA GetComputerNameA MultiByteToWideChar HeapAlloc GetLastError HeapReAlloc GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapFree LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

SetActiveWindow

advapi32

RevertToSelf

Sharing

General

Malware Config

Signatures

File Explorer

dd1380805c9f165a1c4ed1c2be6f21c2ddff3152a816246744ae3150f43c5fef

kernel32

user32

advapi32

generic