4f1f2122244df2d56c3f85a8ae81dc545840a2d524476af85287042ba2bf05c3

General

Target
4f1f2122244df2d56c3f85a8ae81dc545840a2d524476af85287042ba2bf05c3
Size 1.6MB
Sample240613-edfcxsxamp
SHA256 4f1f2122244df2d56c3f85a8ae81dc545840a2d524476af85287042ba2bf05c3
MD5 04f04fe69ea00a6bffb9c367e90006b1
SHA1 bfc43a27302db016d116c5813aa1cdb42f670835
SHA512 dce0c290c45c03a3ac456c84f4a1a69460b799346b5a9b44b604b4494ea8c59c1a2c68c6950ecba1667b92bcc5265a7710ace3406333ff850e1e5e3a9c5f4708
SSDEEP 12288:ph9B+VvUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8:ph9Bwatr0zAiX90z/F0jsFB3SQk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f1f2122244df2d56c3f85a8ae81dc545840a2d524476af85287042ba2bf05c3

File Explorer

4f1f2122244df2d56c3f85a8ae81dc545840a2d524476af85287042ba2bf05c3

.exe 1.6MB

4f1f2122244df2d56c3f85a8ae81dc545840a2d524476af85287042ba2bf05c3

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 4f1f2122244df2d56c3f85a8ae81dc545840a2d524476af85287042ba2bf05c3
MD5 04f04fe69ea00a6bffb9c367e90006b1
SHA1 bfc43a27302db016d116c5813aa1cdb42f670835
SHA512 dce0c290c45c03a3ac456c84f4a1a69460b799346b5a9b44b604b4494ea8c59c1a2c68c6950ecba1667b92bcc5265a7710ace3406333ff850e1e5e3a9c5f4708
SSDEEP 12288:ph9B+VvUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8:ph9Bwatr0zAiX90z/F0jsFB3SQk
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

4f1f2122244df2d56c3f85a8ae81dc545840a2d524476af85287042ba2bf05c3

advapi32

kernel32

shell32

user32

shlwapi

generic