442ce7b03abe554732cd83b48e4dbf1daa320f5ef2bf1989b4ad34010a525ae0

General

Target
442ce7b03abe554732cd83b48e4dbf1daa320f5ef2bf1989b4ad34010a525ae0
Size 487KB
Sample240609-gjp6esfd25
SHA256 442ce7b03abe554732cd83b48e4dbf1daa320f5ef2bf1989b4ad34010a525ae0
MD5 b3d81a343af122b3bec90f6e48b9f09e
SHA1 49cd65860ef6ea98af090653f520bb8d45b245f0
SHA512 f2ab55e38a8c430edc659af4bdb78631d32639c0df56f3e982ea3d7937226194f8e6b370b3f5bae1d76cfad769a302f84b61debf4bc2287b2bd1b8086faf7502
SSDEEP 6144:HO7LVNFfI8Ln46HfiOyHY65C3BKy1ZN1Zr4iChtS3BgIM72S:MHFD4EkH8BK+X2twun
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442ce7b03abe554732cd83b48e4dbf1daa320f5ef2bf1989b4ad34010a525ae0

File Explorer

442ce7b03abe554732cd83b48e4dbf1daa320f5ef2bf1989b4ad34010a525ae0

.exe 487KB

442ce7b03abe554732cd83b48e4dbf1daa320f5ef2bf1989b4ad34010a525ae0

IMPHASH 0430d78ef3f9cedd69689b351fbb4021
SHA256 442ce7b03abe554732cd83b48e4dbf1daa320f5ef2bf1989b4ad34010a525ae0
MD5 b3d81a343af122b3bec90f6e48b9f09e
SHA1 49cd65860ef6ea98af090653f520bb8d45b245f0
SHA512 f2ab55e38a8c430edc659af4bdb78631d32639c0df56f3e982ea3d7937226194f8e6b370b3f5bae1d76cfad769a302f84b61debf4bc2287b2bd1b8086faf7502
SSDEEP 6144:HO7LVNFfI8Ln46HfiOyHY65C3BKy1ZN1Zr4iChtS3BgIM72S:MHFD4EkH8BK+X2twun
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9119

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetTimeFormatA GetModuleHandleW GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA FormatMessageA LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW lstrcpynW FindNextVolumeW GetConsoleAliasW FileTimeToSystemTime CompareStringW SetConsoleTitleA CreateJobObjectA GetNamedPipeHandleStateW SetThreadLocale EnumCalendarInfoW GetProcAddress SetVolumeLabelW BuildCommDCBW LoadLibraryA UnhandledExceptionFilter LocalAlloc GetModuleFileNameA SetConsoleCursorInfo lstrcatW GetProcessAffinityMask PurgeComm EnumDateFormatsW DeleteCriticalSection FindAtomW DeleteAtom OpenFileMappingA EnumCalendarInfoExA SetLastError InterlockedIncrement GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

LoadIconA

advapi32

SetThreadToken

Sharing

General

Malware Config

Signatures

File Explorer

442ce7b03abe554732cd83b48e4dbf1daa320f5ef2bf1989b4ad34010a525ae0

kernel32

user32

advapi32

generic