b70259e76c857a90ce06427443805bbaa3aaf999f2803637ee7b256a5ca6ea80

General

Target
b70259e76c857a90ce06427443805bbaa3aaf999f2803637ee7b256a5ca6ea80
Size 444KB
Sample240614-ajtqaaxcjc
SHA256 b70259e76c857a90ce06427443805bbaa3aaf999f2803637ee7b256a5ca6ea80
MD5 953ce3e82e384e144e5057a61c1b7de0
SHA1 bb891552d9ed91df361823d82a282aa17a199fdc
SHA512 47db8b95a4b1f4c0a51ce79db6470de63ae8fa58f6a9f325a60c176728a9879f769a4ed3b3ca1d5ff59dfad2aa7d52d9cc67cd685a41b6f71eb73aea5692ca11
SSDEEP 6144:nvLAx8DEcMte/6sBnBZrGbi1osXmwLnx5meym8gxx2gxefb:vEx8DCQ/LNfCO1osXzLnx5pxtxe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70259e76c857a90ce06427443805bbaa3aaf999f2803637ee7b256a5ca6ea80

File Explorer

b70259e76c857a90ce06427443805bbaa3aaf999f2803637ee7b256a5ca6ea80

.exe 444KB

b70259e76c857a90ce06427443805bbaa3aaf999f2803637ee7b256a5ca6ea80

IMPHASH 8ea74dce6650cd76614c9661697ae9c5
SHA256 b70259e76c857a90ce06427443805bbaa3aaf999f2803637ee7b256a5ca6ea80
MD5 953ce3e82e384e144e5057a61c1b7de0
SHA1 bb891552d9ed91df361823d82a282aa17a199fdc
SHA512 47db8b95a4b1f4c0a51ce79db6470de63ae8fa58f6a9f325a60c176728a9879f769a4ed3b3ca1d5ff59dfad2aa7d52d9cc67cd685a41b6f71eb73aea5692ca11
SSDEEP 6144:nvLAx8DEcMte/6sBnBZrGbi1osXmwLnx5meym8gxx2gxefb:vEx8DCQ/LNfCO1osXzLnx5pxtxe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9691

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetVolumeLabelA SetDefaultCommConfigA GetConsoleAliasesLengthW GetLocaleInfoA GetStringTypeA InterlockedDecrement CreateJobObjectW SetVolumeMountPointW SetCommBreak GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesA GlobalAlloc LoadLibraryW FormatMessageW WriteConsoleOutputA lstrcpynW GetTimeFormatW SetConsoleTitleA GetStringTypeExA CreateJobObjectA GetNamedPipeHandleStateW SetLastError GetThreadLocale GetProcAddress LoadLibraryA WriteConsoleA UnhandledExceptionFilter RegisterWaitForSingleObject SetFileApisToANSI OpenJobObjectW FindAtomA GetModuleFileNameA lstrcatW OpenFileMappingW BuildCommDCBA SetCalendarInfoA GlobalAddAtomW FindNextVolumeA LocalFileTimeToFileTime HeapAlloc GetLastError HeapReAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar ReadFile HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeW FlushFileBuffers CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconW

Sharing

General

Malware Config

Signatures

File Explorer

b70259e76c857a90ce06427443805bbaa3aaf999f2803637ee7b256a5ca6ea80

kernel32

user32

generic