cb3b203f1fc56eec52f17cf5ecc96a51e1944a36ffeb9a385d4df8f59d88665a

General

Target
cb3b203f1fc56eec52f17cf5ecc96a51e1944a36ffeb9a385d4df8f59d88665a
Size 501KB
Sample240613-mmerrayglp
SHA256 cb3b203f1fc56eec52f17cf5ecc96a51e1944a36ffeb9a385d4df8f59d88665a
MD5 b59d75a0cac3fdf8e58fcc7fff4bf9bf
SHA1 fc6a8e66a46f89c7fa0dfc05b0fac195a475d062
SHA512 4f385dcdab362446ebad78853c5be6b7169f308f5131e13a03a3154bf0461d5f4f6962f7b554b8f77e98f05552ea2030dc3b470b27fbe8c8a3c969e5f13ab16d
SSDEEP 6144:m6IKW0L7frH8sADhOVFIK9rTDMM3udjrl3FFHfrLaXfbTO8SgQb:g0vfrH8RDwUKG9dvl/Hfr2PMg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb3b203f1fc56eec52f17cf5ecc96a51e1944a36ffeb9a385d4df8f59d88665a

File Explorer

cb3b203f1fc56eec52f17cf5ecc96a51e1944a36ffeb9a385d4df8f59d88665a

.exe 501KB

cb3b203f1fc56eec52f17cf5ecc96a51e1944a36ffeb9a385d4df8f59d88665a

IMPHASH ab5d9abe74f68e37e80c618926ab4540
SHA256 cb3b203f1fc56eec52f17cf5ecc96a51e1944a36ffeb9a385d4df8f59d88665a
MD5 b59d75a0cac3fdf8e58fcc7fff4bf9bf
SHA1 fc6a8e66a46f89c7fa0dfc05b0fac195a475d062
SHA512 4f385dcdab362446ebad78853c5be6b7169f308f5131e13a03a3154bf0461d5f4f6962f7b554b8f77e98f05552ea2030dc3b470b27fbe8c8a3c969e5f13ab16d
SSDEEP 6144:m6IKW0L7frH8sADhOVFIK9rTDMM3udjrl3FFHfrLaXfbTO8SgQb:g0vfrH8RDwUKG9dvl/Hfr2PMg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9539

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA GetConsoleAliasesLengthW GetLocaleInfoA GetStringTypeA InterlockedDecrement CreateJobObjectW SetVolumeMountPointW SetCommBreak GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesA ReadConsoleOutputA LoadLibraryW FormatMessageW GetStringTypeExW lstrcpynW GetTimeFormatW SetConsoleTitleA CreateJobObjectA GetNamedPipeHandleStateW SetLastError GetThreadLocale GetProcAddress SetVolumeLabelW BuildCommDCBW LoadLibraryA WriteConsoleA UnhandledExceptionFilter RegisterWaitForSingleObject LocalAlloc SetFileApisToANSI OpenJobObjectW FindAtomA GetModuleFileNameA lstrcatW OpenFileMappingW SetCalendarInfoA GlobalAddAtomW FindNextVolumeA LocalFileTimeToFileTime HeapAlloc GetLastError HeapReAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar ReadFile WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeW SetFilePointer SetStdHandle CloseHandle GetConsoleOutputCP WriteConsoleW CreateFileA GetModuleHandleA

user32

LoadIconW

Sharing

General

Malware Config

Signatures

File Explorer

cb3b203f1fc56eec52f17cf5ecc96a51e1944a36ffeb9a385d4df8f59d88665a

kernel32

user32

generic