0f3b00054eb936e4064cccf117770df301e571f94d6a84ab2b9e7313c35008ec

General

Target
0f3b00054eb936e4064cccf117770df301e571f94d6a84ab2b9e7313c35008ec
Size 10.8MB
Sample240620-kdthfascnq
SHA256 0f3b00054eb936e4064cccf117770df301e571f94d6a84ab2b9e7313c35008ec
MD5 8b1a03576a343231a6dea02fb795c4f2
SHA1 268ea8a541dd86d02f34770ebdafc5ef7a4a348a
SHA512 e09e55f60a1db195acd3de91bc900a8516641f32e2c51b6e3341580c249def8e84daecaed393ff49698f26dba81c37fad8c44d67c2beb15eea34d5b083700403
SSDEEP 3072:SCnHFEJgedCWkkqh6hQ7W7U+o/63uGRg/0JUxq6R/lGEk/Ib1Vbfhrq6JppppppZ:S46VdFq4of+oixRC+slxFOITbo6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3b00054eb936e4064cccf117770df301e571f94d6a84ab2b9e7313c35008ec

File Explorer

0f3b00054eb936e4064cccf117770df301e571f94d6a84ab2b9e7313c35008ec

.exe 10.8MB

0f3b00054eb936e4064cccf117770df301e571f94d6a84ab2b9e7313c35008ec

IMPHASH 5e8c790316167009ad79ab4dba19f7fb
SHA256 0f3b00054eb936e4064cccf117770df301e571f94d6a84ab2b9e7313c35008ec
MD5 8b1a03576a343231a6dea02fb795c4f2
SHA1 268ea8a541dd86d02f34770ebdafc5ef7a4a348a
SHA512 e09e55f60a1db195acd3de91bc900a8516641f32e2c51b6e3341580c249def8e84daecaed393ff49698f26dba81c37fad8c44d67c2beb15eea34d5b083700403
SSDEEP 3072:SCnHFEJgedCWkkqh6hQ7W7U+o/63uGRg/0JUxq6R/lGEk/Ib1Vbfhrq6JppppppZ:S46VdFq4of+oixRC+slxFOITbo6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

33103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetConsoleAliasExesW EnumTimeFormatsA GetCommandLineA GlobalAlloc GetSystemDirectoryW LoadLibraryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW DeleteVolumeMountPointW GetFileAttributesA GetExitCodeProcess GetWriteWatch GetStartupInfoW CreateJobObjectA GetPrivateProfileIntW InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetHandleInformation GetCurrentDirectoryW SetLastError GetProcAddress PeekConsoleInputW RemoveDirectoryA GlobalGetAtomNameA OpenMutexA GetFileType MoveFileA GetModuleHandleW GlobalGetAtomNameW FindNextChangeNotification OpenJobObjectW GlobalWire GetPrivateProfileSectionNamesA EnumDateFormatsA SetConsoleCursorInfo GetModuleHandleA lstrcatW GetProcessAffinityMask FreeEnvironmentStringsW FindNextFileW CreateMailslotA GetStringTypeW EnumDateFormatsW FatalAppExitA SetCalendarInfoA OpenSemaphoreW FindFirstVolumeA SetFileShortNameA GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW ReadConsoleOutputCharacterW EnumSystemLocalesW CommConfigDialogW DeleteFileA SetStdHandle WriteConsoleW FreeEnvironmentStringsA InterlockedDecrement GetNumberFormatW GetConsoleAliasA CreateFileW CloseHandle WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc GetCommandLineW HeapSetInformation GetCPInfo RaiseException RtlUnwind LCMapStringW GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer

user32

GetAltTabInfoW

gdi32

SelectPalette GetCharABCWidthsW GetTextFaceA

winhttp

WinHttpConnect

Sharing

General

Malware Config

Signatures

File Explorer

0f3b00054eb936e4064cccf117770df301e571f94d6a84ab2b9e7313c35008ec

kernel32

user32

gdi32

winhttp

generic