3cf31dc84cce027061dc8b8a606f8973e2fae1931817ad6dea6e9d02c61e0aab

General

Target
3cf31dc84cce027061dc8b8a606f8973e2fae1931817ad6dea6e9d02c61e0aab
Size 434KB
Sample240609-n7eg6aba48
SHA256 3cf31dc84cce027061dc8b8a606f8973e2fae1931817ad6dea6e9d02c61e0aab
MD5 78ee182b29cede7af9fb4df47cfb19c2
SHA1 1da33ea85b4593a3323601a6cd5abe7d83eaa7c6
SHA512 87736e86c8129e8b0656d0b2685f6bc868a47ec0bfd72b9d2575747eb78c8a6a92621bc50640ed66723c82cc02447a33a6ca44a520cb7842636e73887101b696
SSDEEP 6144:7DpNLJXpttKcgiWiLDAg1M1fVszWcPWuWK7QK7eS:/jVXpttKc/WinAimazWcPWM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf31dc84cce027061dc8b8a606f8973e2fae1931817ad6dea6e9d02c61e0aab

File Explorer

3cf31dc84cce027061dc8b8a606f8973e2fae1931817ad6dea6e9d02c61e0aab

.exe 434KB

3cf31dc84cce027061dc8b8a606f8973e2fae1931817ad6dea6e9d02c61e0aab

IMPHASH f09dd024513d9f66f67a583a5c24f931
SHA256 3cf31dc84cce027061dc8b8a606f8973e2fae1931817ad6dea6e9d02c61e0aab
MD5 78ee182b29cede7af9fb4df47cfb19c2
SHA1 1da33ea85b4593a3323601a6cd5abe7d83eaa7c6
SHA512 87736e86c8129e8b0656d0b2685f6bc868a47ec0bfd72b9d2575747eb78c8a6a92621bc50640ed66723c82cc02447a33a6ca44a520cb7842636e73887101b696
SSDEEP 6144:7DpNLJXpttKcgiWiLDAg1M1fVszWcPWuWK7QK7eS:/jVXpttKc/WinAimazWcPWM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9119

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateA GetComputerNameW GetTimeFormatA GetModuleHandleW GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA ReadConsoleW FormatMessageA LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW lstrcpynW FindNextVolumeW GetConsoleAliasW FileTimeToSystemTime SetConsoleTitleA CreateJobObjectA SetThreadLocale EnumCalendarInfoW GetProcAddress SetVolumeLabelW LoadLibraryA UnhandledExceptionFilter LocalAlloc RegisterWaitForSingleObjectEx GetModuleFileNameA lstrcatW OpenFileMappingW BuildCommDCBA PurgeComm EnumDateFormatsW CompareStringA FindAtomW GlobalAddAtomW EnumCalendarInfoExA AreFileApisANSI SetLastError InterlockedIncrement GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

LoadIconA

advapi32

SetThreadToken

Sharing

General

Malware Config

Signatures

File Explorer

3cf31dc84cce027061dc8b8a606f8973e2fae1931817ad6dea6e9d02c61e0aab

kernel32

user32

advapi32

generic