656502786edd8be24a561382c1d8306886fc6406e7f2e54c176bb62e7c9faf55

General

Target
656502786edd8be24a561382c1d8306886fc6406e7f2e54c176bb62e7c9faf55
Size 492KB
Sample240612-fbav4a1dkh
SHA256 656502786edd8be24a561382c1d8306886fc6406e7f2e54c176bb62e7c9faf55
MD5 a36fa065256db4c9243af2d8bfa48183
SHA1 5243b8ca935af61c73e883042bbf4ce4428585f2
SHA512 6920ed37e3e55f3e4c8946cbd7e7e3359c0450bed42c615e1a3d75aab0e55f9df7590ca57176be4b27c27dfa8272b7261d71573467f2c73f67b13f36530109cf
SSDEEP 1536:BJbTRIRBPhZYv9ACtUKsjeYHLmDb5ONvR+CgH5F4gsW9ZzcdPIiLuyYJ:XTaHZqv9AYkLmDbUNUFYPIiLuyYJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
656502786edd8be24a561382c1d8306886fc6406e7f2e54c176bb62e7c9faf55

File Explorer

656502786edd8be24a561382c1d8306886fc6406e7f2e54c176bb62e7c9faf55

.exe 492KB

656502786edd8be24a561382c1d8306886fc6406e7f2e54c176bb62e7c9faf55

IMPHASH 8d52ef810a010cc491cb81003d22f0f9
SHA256 656502786edd8be24a561382c1d8306886fc6406e7f2e54c176bb62e7c9faf55
MD5 a36fa065256db4c9243af2d8bfa48183
SHA1 5243b8ca935af61c73e883042bbf4ce4428585f2
SHA512 6920ed37e3e55f3e4c8946cbd7e7e3359c0450bed42c615e1a3d75aab0e55f9df7590ca57176be4b27c27dfa8272b7261d71573467f2c73f67b13f36530109cf
SSDEEP 1536:BJbTRIRBPhZYv9ACtUKsjeYHLmDb5ONvR+CgH5F4gsW9ZzcdPIiLuyYJ:XTaHZqv9AYkLmDbUNUFYPIiLuyYJ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4897

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\develope\ScreencastV6A\x64\Release\SetExStyle32.pdb

kernel32

Sleep LoadLibraryW GetProcAddress WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetCommandLineA GetCommandLineW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP DecodePointer

user32

MessageBoxW SendMessageW UnhookWindowsHookEx SetWindowsHookExW GetWindowThreadProcessId GetWindowLongW

Sharing

General

Malware Config

Signatures

File Explorer

656502786edd8be24a561382c1d8306886fc6406e7f2e54c176bb62e7c9faf55

kernel32

user32

generic