79775ce52be43944e7568edae42f7c568a2380ddeeb10460449d09468fdb68d0

General

Target
79775ce52be43944e7568edae42f7c568a2380ddeeb10460449d09468fdb68d0
Size 491KB
Sample240613-lvqnjstdmc
SHA256 79775ce52be43944e7568edae42f7c568a2380ddeeb10460449d09468fdb68d0
MD5 0bb73e949ae1aba2d1a251a138f3288c
SHA1 dfa99e9ba9d4d213528106207440b0b706612458
SHA512 c54283de2ebe34a6b2deffa87677a632734a16907a9f9fb073a07cf72dacc48224d94d625e89cc2c0960193d508cfc39496b4f830eb6751d9e3884f7ec1acb36
SSDEEP 6144:FnJgLyN1mxINSH6E3tk1b1oNC2szy4Jrsat5m6G/Gb:gWN1mxIC5kmJse0Pun/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79775ce52be43944e7568edae42f7c568a2380ddeeb10460449d09468fdb68d0

File Explorer

79775ce52be43944e7568edae42f7c568a2380ddeeb10460449d09468fdb68d0

.exe 491KB

79775ce52be43944e7568edae42f7c568a2380ddeeb10460449d09468fdb68d0

IMPHASH 837558c4395dad8a7cb47fedcbd7df3b
SHA256 79775ce52be43944e7568edae42f7c568a2380ddeeb10460449d09468fdb68d0
MD5 0bb73e949ae1aba2d1a251a138f3288c
SHA1 dfa99e9ba9d4d213528106207440b0b706612458
SHA512 c54283de2ebe34a6b2deffa87677a632734a16907a9f9fb073a07cf72dacc48224d94d625e89cc2c0960193d508cfc39496b4f830eb6751d9e3884f7ec1acb36
SSDEEP 6144:FnJgLyN1mxINSH6E3tk1b1oNC2szy4Jrsat5m6G/Gb:gWN1mxIC5kmJse0Pun/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9539

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetVolumeLabelA SetDefaultCommConfigA GetConsoleAliasesLengthW GetLocaleInfoA GetStringTypeA InterlockedDecrement SetVolumeMountPointW SetCommBreak GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesA FormatMessageA ReadConsoleOutputA LoadLibraryW lstrcpynW GetTimeFormatW SetConsoleTitleA CreateJobObjectA GetNamedPipeHandleStateW SetLastError GetThreadLocale GetProcAddress BuildCommDCBW LoadLibraryA WriteConsoleA UnhandledExceptionFilter RegisterWaitForSingleObject LocalAlloc SetFileApisToANSI OpenJobObjectW FindAtomA GetModuleFileNameA lstrcatW OpenFileMappingW SetCalendarInfoA GlobalAddAtomW FindNextVolumeA LocalFileTimeToFileTime HeapAlloc GetLastError HeapReAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar ReadFile WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeW SetFilePointer SetStdHandle CloseHandle GetConsoleOutputCP WriteConsoleW CreateFileA GetModuleHandleA

user32

LoadIconW

Sharing

General

Malware Config

Signatures

File Explorer

79775ce52be43944e7568edae42f7c568a2380ddeeb10460449d09468fdb68d0

kernel32

user32

generic