70f147f1cb9a7e7c9a7d011a5a144e660b735330714527b908192aadba9f896d

General

Target
70f147f1cb9a7e7c9a7d011a5a144e660b735330714527b908192aadba9f896d
Size 372KB
Sample240607-s6s2daae91
SHA256 70f147f1cb9a7e7c9a7d011a5a144e660b735330714527b908192aadba9f896d
MD5 fcce3c2776b3633be23ae4237929c613
SHA1 ca7ef85f47577f85e20d1170915c898389b90df6
SHA512 3ecfcff3e5a3d08b61065103b7b14e82e0950115a16a283be76fe50e420a1adb97241a162e15ed33bd7e82db20594adbc639d12585731f1f6282a9fd1c19ee50
SSDEEP 6144:nOLrezaStDalVgibRGpedBACyrq1gKiR+7pe0Fw/Puau1Rb:OH0aJlfYedBUMTs+M0Fw/Ptk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70f147f1cb9a7e7c9a7d011a5a144e660b735330714527b908192aadba9f896d

File Explorer

70f147f1cb9a7e7c9a7d011a5a144e660b735330714527b908192aadba9f896d

.exe 372KB

70f147f1cb9a7e7c9a7d011a5a144e660b735330714527b908192aadba9f896d

IMPHASH 3a40287dbdd1907b02105bdb2b12e551
SHA256 70f147f1cb9a7e7c9a7d011a5a144e660b735330714527b908192aadba9f896d
MD5 fcce3c2776b3633be23ae4237929c613
SHA1 ca7ef85f47577f85e20d1170915c898389b90df6
SHA512 3ecfcff3e5a3d08b61065103b7b14e82e0950115a16a283be76fe50e420a1adb97241a162e15ed33bd7e82db20594adbc639d12585731f1f6282a9fd1c19ee50
SSDEEP 6144:nOLrezaStDalVgibRGpedBACyrq1gKiR+7pe0Fw/Puau1Rb:OH0aJlfYedBUMTs+M0Fw/Ptk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement CreateJobObjectW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA FormatMessageA LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW lstrcpynW GetTimeFormatW FindNextVolumeW SetTimeZoneInformation FileTimeToSystemTime GetModuleFileNameW SetConsoleTitleA RaiseException GetStringTypeExA GetConsoleAliasesW EnumCalendarInfoW SetLastError GetProcAddress SetVolumeLabelW VerLanguageNameW LoadLibraryA LocalAlloc SetConsoleCursorInfo lstrcatW GetProcessAffinityMask BuildCommDCBA PurgeComm EnumDateFormatsW CompareStringA DeleteCriticalSection DeleteAtom OpenFileMappingA EnumCalendarInfoExA SetThreadLocale GetComputerNameA GetLastError HeapFree HeapReAlloc HeapAlloc GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree LeaveCriticalSection EnterCriticalSection VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconW SetActiveWindow

advapi32

RevertToSelf

Sharing

General

Malware Config

Signatures

File Explorer

70f147f1cb9a7e7c9a7d011a5a144e660b735330714527b908192aadba9f896d

kernel32

user32

advapi32

generic