d815ff703121ae27b440c32415e21403e422d889d795ee19ccdbec0aef801c67

Sharing

Copy URL Twitter E-mail

General

Target
d815ff703121ae27b440c32415e21403e422d889d795ee19ccdbec0aef801c67
Size 332KB
Sample240610-grhfjsdf64
SHA256 d815ff703121ae27b440c32415e21403e422d889d795ee19ccdbec0aef801c67
MD5 1b8b4a78b92bca8d621cf7a6d47b5470
SHA1 3441786d5d8d242cb8dd9a34e9859a3a7d465c94
SHA512 1d15cc040ecfd0bb055326f8a51e07fc37d658d2b28f289db8f175a46fcdfa30f3b6044741228e0bbe03893d8f5319e976bfd02d98ecf45b8fd72ec5e36197fc
SSDEEP 6144:NWBSNfiQfEbTHf83pF8Nzy9VCpJQYp6IimRVUwAPA6nB+ftT:QufiKEbT/eF8NOipJiM/Uww+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d815ff703121ae27b440c32415e21403e422d889d795ee19ccdbec0aef801c67

File Explorer

d815ff703121ae27b440c32415e21403e422d889d795ee19ccdbec0aef801c67

.exe 332KB

d815ff703121ae27b440c32415e21403e422d889d795ee19ccdbec0aef801c67

IMPHASH 748898973e6a9f5306d934dfabbf86e2
SHA256 d815ff703121ae27b440c32415e21403e422d889d795ee19ccdbec0aef801c67
MD5 1b8b4a78b92bca8d621cf7a6d47b5470
SHA1 3441786d5d8d242cb8dd9a34e9859a3a7d465c94
SHA512 1d15cc040ecfd0bb055326f8a51e07fc37d658d2b28f289db8f175a46fcdfa30f3b6044741228e0bbe03893d8f5319e976bfd02d98ecf45b8fd72ec5e36197fc
SSDEEP 6144:NWBSNfiQfEbTHf83pF8Nzy9VCpJQYp6IimRVUwAPA6nB+ftT:QufiKEbT/eF8NOipJiM/Uww+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16223

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLangID TzSpecificLocalTimeToSystemTime TlsSetValue GlobalAlloc lstrcatA QueryInformationJobObject GetACP GetLastError SetLastError GetProcAddress SetFileAttributesA LoadLibraryA GetNumberFormatA SetConsoleCtrlHandler GetDiskFreeSpaceA FoldStringA GetModuleFileNameA LoadLibraryExA BuildCommDCBA GetWindowsDirectoryW WriteProcessMemory CreateFileW GetStringTypeW GetTickCount OutputDebugStringW SetComputerNameW CreateDirectoryW InterlockedCompareExchange PeekNamedPipe IsBadStringPtrW FindFirstVolumeMountPointW SetDefaultCommConfigA LCMapStringW GetCPInfo GetOEMCP IsValidCodePage LoadLibraryExW HeapFree EncodePointer DecodePointer ReadFile HeapReAlloc GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode DeleteCriticalSection ExitProcess GetModuleHandleExW MultiByteToWideChar HeapSize IsDebuggerPresent GetStdHandle GetFileType GetStartupInfoW SetFilePointerEx GetCurrentThreadId HeapAlloc GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsFree GetModuleHandleW SetStdHandle WriteConsoleW CloseHandle

user32

CloseWindow LoadMenuW SetUserObjectSecurity DrawCaption

gdi32

GetCharacterPlacementW DeleteMetaFile GetTextMetricsA GetPixelFormat

advapi32

ReadEventLogW DeregisterEventSource ReadEventLogA

ole32

CoRegisterPSClsid CoGetClassObject CoMarshalHresult

winhttp

WinHttpCheckPlatform WinHttpSetDefaultProxyConfiguration WinHttpWriteData

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

d815ff703121ae27b440c32415e21403e422d889d795ee19ccdbec0aef801c67

kernel32

user32

gdi32

advapi32

ole32

winhttp

msimg32

generic