d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7

General

Target
d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7
Size 491KB
Sample240618-vdv2dawdrm
SHA256 d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7
MD5 9f0642f84da5ea8bad4afa9a38a1af23
SHA1 4cd0ae199aafd8fda4f8baf005799fc97e99184f
SHA512 382dee9a26c090a7cbd9b119474bf0421fdb6d96b2525c7abe476d0557fb0ca4bb4572da7dbe29b0a36039f57da6f16c00fc50b0069cbc133057bfdfdbfd9582
SSDEEP 6144:QLoRBmJqEbn2x30I3oROSyBVLmsMeD9ykKRsGpwFK4IQRUAQtshBUrw5Az:QkmIY2xEIYOSy3qsB9aRsGGgQaAQ6PQb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7

File Explorer

d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7

.exe 491KB

d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7

IMPHASH eb4559a6ab13ae48fed5742731d48fd2
SHA256 d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7
MD5 9f0642f84da5ea8bad4afa9a38a1af23
SHA1 4cd0ae199aafd8fda4f8baf005799fc97e99184f
SHA512 382dee9a26c090a7cbd9b119474bf0421fdb6d96b2525c7abe476d0557fb0ca4bb4572da7dbe29b0a36039f57da6f16c00fc50b0069cbc133057bfdfdbfd9582
SSDEEP 6144:QLoRBmJqEbn2x30I3oROSyBVLmsMeD9ykKRsGpwFK4IQRUAQtshBUrw5Az:QkmIY2xEIYOSy3qsB9aRsGGgQaAQ6PQb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6222

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA GetStringTypeA GlobalAddAtomA InterlockedDecrement SetDefaultCommConfigW CreateJobObjectW GetNamedPipeHandleStateA GetTimeFormatA GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesA GlobalAlloc LoadLibraryW SetVolumeMountPointA FormatMessageW WriteConsoleOutputA lstrcpynW LocalReAlloc GetModuleFileNameW GetStringTypeExA CreateJobObjectA GetConsoleAliasesW SetLastError GetThreadLocale GetProcAddress SetVolumeLabelW BuildCommDCBW LoadLibraryA WriteConsoleA UnhandledExceptionFilter RegisterWaitForSingleObject SetCalendarInfoW OpenJobObjectW FindAtomA SetConsoleTitleW lstrcatW PurgeComm OpenFileMappingA FindNextVolumeA AreFileApisANSI LocalFileTimeToFileTime GetModuleHandleA HeapAlloc GetLastError HeapReAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeW HeapSize FlushFileBuffers CreateFileA CloseHandle RaiseException

user32

LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7

kernel32

user32

generic