97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

General

Target
97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347
Size 383KB
Sample240615-pttwcsvbqq
SHA256 97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347
MD5 6464b510554ea72632d2b746b91d8744
SHA1 b50afb7dc6fd024514d5416bb82b8bce5ee6c3fa
SHA512 e2461beed333a1c586847fac6c147faa831712eddb45dc1cf515a9e2314c84e23b377fafbf9024c0cb13ca50d1fccc5051ccb4e4ef917ab80a053ed1dda26e82
SSDEEP 6144:LFbun5sFf+48TQHOMTGXHWsegZ3pIIl9mFIOujTh:L8nSFf+NUuMTGfZ3mIl9E/s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

File Explorer

97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

.exe 383KB

97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

IMPHASH 1c3aebb846cbbabbc7cfe5a60c0dd715
SHA256 97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347
MD5 6464b510554ea72632d2b746b91d8744
SHA1 b50afb7dc6fd024514d5416bb82b8bce5ee6c3fa
SHA512 e2461beed333a1c586847fac6c147faa831712eddb45dc1cf515a9e2314c84e23b377fafbf9024c0cb13ca50d1fccc5051ccb4e4ef917ab80a053ed1dda26e82
SSDEEP 6144:LFbun5sFf+48TQHOMTGXHWsegZ3pIIl9mFIOujTh:L8nSFf+NUuMTGfZ3mIl9E/s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12427

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetTickCount GetNumberFormatA GetWindowsDirectoryA GetUserDefaultLangID SetProcessPriorityBoost TlsSetValue GlobalAlloc LoadLibraryW AssignProcessToJobObject GetACP IsBadStringPtrA OpenMutexW GetLastError SetLastError GetProcAddress BuildCommDCBW LoadLibraryA InterlockedExchangeAdd GetDiskFreeSpaceA FoldStringA GetModuleFileNameA FindFirstVolumeMountPointA LoadLibraryExA lstrcatW OutputDebugStringA WriteProcessMemory HeapFree EncodePointer DecodePointer HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW HeapAlloc HeapCreate Sleep HeapSize InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetCPInfo GetOEMCP IsValidCodePage RaiseException IsProcessorFeaturePresent LCMapStringW MultiByteToWideChar GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

kernel32

generic