b1a80c77898feb1984cfbf30c851f69dd802c59895eebbc8d16e8241e230348a

General

Target
b1a80c77898feb1984cfbf30c851f69dd802c59895eebbc8d16e8241e230348a
Size 1.6MB
Sample240613-c327waveqk
SHA256 b1a80c77898feb1984cfbf30c851f69dd802c59895eebbc8d16e8241e230348a
MD5 f300085e548a1b7330dec120f02c0fc9
SHA1 2ece7aff50e2643ca6242f2daf36ae4ff610852f
SHA512 a147ffe79634179713b9ee227bd10a3f806e074484c3cf076566d9656e5e306fa938bab6c77e1577e56afa5f87927c9bcd4448157e298887385b9ef77b8e1940
SSDEEP 24576:Nh9BWCks7WE9F5pwg8zmdqQjC60jiHkU:NBWCks7R9L58UqFJjskU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1a80c77898feb1984cfbf30c851f69dd802c59895eebbc8d16e8241e230348a

File Explorer

b1a80c77898feb1984cfbf30c851f69dd802c59895eebbc8d16e8241e230348a

.exe 1.6MB

b1a80c77898feb1984cfbf30c851f69dd802c59895eebbc8d16e8241e230348a

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 b1a80c77898feb1984cfbf30c851f69dd802c59895eebbc8d16e8241e230348a
MD5 f300085e548a1b7330dec120f02c0fc9
SHA1 2ece7aff50e2643ca6242f2daf36ae4ff610852f
SHA512 a147ffe79634179713b9ee227bd10a3f806e074484c3cf076566d9656e5e306fa938bab6c77e1577e56afa5f87927c9bcd4448157e298887385b9ef77b8e1940
SSDEEP 24576:Nh9BWCks7WE9F5pwg8zmdqQjC60jiHkU:NBWCks7R9L58UqFJjskU
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

b1a80c77898feb1984cfbf30c851f69dd802c59895eebbc8d16e8241e230348a

advapi32

kernel32

shell32

user32

shlwapi

generic