3615b63b2dd4b621b6637ee28cb7a7a0ad99bdc4d01562c24b015b240501be04

General

Target
3615b63b2dd4b621b6637ee28cb7a7a0ad99bdc4d01562c24b015b240501be04
Size 1.3MB
Sample240613-faatpsyalq
SHA256 3615b63b2dd4b621b6637ee28cb7a7a0ad99bdc4d01562c24b015b240501be04
MD5 4c151b74d4ff63789e3341390e47e4da
SHA1 ef19defa647e45fbfbcad96da41a2b06e0733978
SHA512 34cefc034d9af2604bce908bbd6fde6b1954189a2065b1d2be9d686345ac006ec27ff36ba5304bf5972672d1fcdece5b1744dd2d54ec555a058c69888e3876f2
SSDEEP 12288:lE9B+VMGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhJ:lE9BCt/sBlDqgZQd6XKtiMJYiPUJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3615b63b2dd4b621b6637ee28cb7a7a0ad99bdc4d01562c24b015b240501be04

File Explorer

3615b63b2dd4b621b6637ee28cb7a7a0ad99bdc4d01562c24b015b240501be04

.exe 1.3MB

3615b63b2dd4b621b6637ee28cb7a7a0ad99bdc4d01562c24b015b240501be04

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 3615b63b2dd4b621b6637ee28cb7a7a0ad99bdc4d01562c24b015b240501be04
MD5 4c151b74d4ff63789e3341390e47e4da
SHA1 ef19defa647e45fbfbcad96da41a2b06e0733978
SHA512 34cefc034d9af2604bce908bbd6fde6b1954189a2065b1d2be9d686345ac006ec27ff36ba5304bf5972672d1fcdece5b1744dd2d54ec555a058c69888e3876f2
SSDEEP 12288:lE9B+VMGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhJ:lE9BCt/sBlDqgZQd6XKtiMJYiPUJ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

3615b63b2dd4b621b6637ee28cb7a7a0ad99bdc4d01562c24b015b240501be04

advapi32

kernel32

shell32

user32

shlwapi

generic