f46dad8197b2d0a34a8d55b46a204c0f0be76efd2cfad9125631e0d26f1125c6

General

Target
f46dad8197b2d0a34a8d55b46a204c0f0be76efd2cfad9125631e0d26f1125c6
Size 485KB
Sample240620-fx9ljs1bna
SHA256 f46dad8197b2d0a34a8d55b46a204c0f0be76efd2cfad9125631e0d26f1125c6
MD5 63f4a9d79e15748b849f796db8890b8c
SHA1 136fbafce2c84a883da23106b3c7134f878dfd3c
SHA512 69a0f154d181fcd56619156b4e51274d3424210cb7e31a4c9d76682feeba21e10e4c76c86c75269c9e28f18f5d05bfdea10e280a5f9b1c99e2d8742e09a7573a
SSDEEP 6144:iEVLU6ETYZMapmWg2ofxUolHtsfyi8mDvQ6zyhplpeJwMKfW9Z2HhZqTR+:tA6ETYLm3hl3owplggO94iR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f46dad8197b2d0a34a8d55b46a204c0f0be76efd2cfad9125631e0d26f1125c6

File Explorer

f46dad8197b2d0a34a8d55b46a204c0f0be76efd2cfad9125631e0d26f1125c6

.exe 485KB

f46dad8197b2d0a34a8d55b46a204c0f0be76efd2cfad9125631e0d26f1125c6

IMPHASH 72ec40303174d55d8c2ea02d4cf2a89f
SHA256 f46dad8197b2d0a34a8d55b46a204c0f0be76efd2cfad9125631e0d26f1125c6
MD5 63f4a9d79e15748b849f796db8890b8c
SHA1 136fbafce2c84a883da23106b3c7134f878dfd3c
SHA512 69a0f154d181fcd56619156b4e51274d3424210cb7e31a4c9d76682feeba21e10e4c76c86c75269c9e28f18f5d05bfdea10e280a5f9b1c99e2d8742e09a7573a
SSDEEP 6144:iEVLU6ETYZMapmWg2ofxUolHtsfyi8mDvQ6zyhplpeJwMKfW9Z2HhZqTR+:tA6ETYLm3hl3owplggO94iR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA GetStringTypeA GlobalAddAtomA OpenJobObjectA InterlockedDecrement SetDefaultCommConfigW GetNamedPipeHandleStateA GetTimeFormatA GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesA GlobalAlloc LoadLibraryW SetVolumeMountPointA FormatMessageW WriteConsoleOutputA GetStringTypeExW lstrcpynW LocalReAlloc GetModuleFileNameW RaiseException CreateJobObjectA GetConsoleAliasesW SetLastError GetThreadLocale GetProcAddress GetLongPathNameA SetVolumeLabelW BuildCommDCBW LoadLibraryA WriteConsoleA RegisterWaitForSingleObject SetCalendarInfoW OpenJobObjectW FindAtomA lstrcatW GetConsoleTitleW PurgeComm OpenFileMappingA FindNextVolumeA AreFileApisANSI LocalFileTimeToFileTime HeapAlloc GetLastError HeapReAlloc GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle HeapSize LCMapStringA LCMapStringW GetStringTypeW ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

f46dad8197b2d0a34a8d55b46a204c0f0be76efd2cfad9125631e0d26f1125c6

kernel32

user32

generic