ada480a52b1b5b050f4186e0f6a7969fd7c951a3a9596f5a1824af11fb48b2e8

General

Target
ada480a52b1b5b050f4186e0f6a7969fd7c951a3a9596f5a1824af11fb48b2e8
Size 486KB
Sample240616-145w6avblk
SHA256 ada480a52b1b5b050f4186e0f6a7969fd7c951a3a9596f5a1824af11fb48b2e8
MD5 7e21139b2ee068b54e0a8c8a2ae2da55
SHA1 44519c4665d33143a19100cf9e2884a5d8c5677f
SHA512 b158bce9c6ff838f75bc515b9d6f3d4f953d293179cfd3c52c7b9b0bfa36499e22b1d87bd0694628fd0545809154f52fdd764b1a61c0caf9677644d8d2ca4285
SSDEEP 6144:XjxL1o4By2pmW51IAaXhpI/s+jK6IxxnEGkl5gfSVQj79lBsVg5wawy57AAV:XdtBfB51naRpn+u6Qbkj7079Ifm7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ada480a52b1b5b050f4186e0f6a7969fd7c951a3a9596f5a1824af11fb48b2e8

File Explorer

ada480a52b1b5b050f4186e0f6a7969fd7c951a3a9596f5a1824af11fb48b2e8

.exe 486KB

ada480a52b1b5b050f4186e0f6a7969fd7c951a3a9596f5a1824af11fb48b2e8

IMPHASH a8e793a691fca3c74822fd515540971c
SHA256 ada480a52b1b5b050f4186e0f6a7969fd7c951a3a9596f5a1824af11fb48b2e8
MD5 7e21139b2ee068b54e0a8c8a2ae2da55
SHA1 44519c4665d33143a19100cf9e2884a5d8c5677f
SHA512 b158bce9c6ff838f75bc515b9d6f3d4f953d293179cfd3c52c7b9b0bfa36499e22b1d87bd0694628fd0545809154f52fdd764b1a61c0caf9677644d8d2ca4285
SSDEEP 6144:XjxL1o4By2pmW51IAaXhpI/s+jK6IxxnEGkl5gfSVQj79lBsVg5wawy57AAV:XdtBfB51naRpn+u6Qbkj7079Ifm7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6364

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA GetConsoleAliasesLengthW GetNumaProcessorNode GetStringTypeA InterlockedDecrement CreateJobObjectW SetVolumeMountPointW SetCommBreak GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesA GlobalAlloc LoadLibraryW GetLocaleInfoW FormatMessageW WriteConsoleOutputA lstrcpynW GetTimeFormatW LocalReAlloc GetModuleFileNameW SetVolumeLabelA CreateJobObjectA GetNamedPipeHandleStateW SetLastError GetThreadLocale GetProcAddress LoadLibraryA WriteConsoleA UnhandledExceptionFilter SetCalendarInfoW SetFileApisToANSI OpenJobObjectW FindAtomA SetConsoleTitleW lstrcatW OpenFileMappingW BuildCommDCBA GlobalAddAtomW FindNextVolumeA LocalFileTimeToFileTime GetModuleHandleA GetStringTypeExA UnregisterWait GetLastError HeapFree HeapAlloc HeapReAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA HeapSize FlushFileBuffers CreateFileA CloseHandle RaiseException

user32

LoadIconW

advapi32

QueryServiceLockStatusW

Sharing

General

Malware Config

Signatures

File Explorer

ada480a52b1b5b050f4186e0f6a7969fd7c951a3a9596f5a1824af11fb48b2e8

kernel32

user32

advapi32

generic