d2d022a3366c1ae252fcb146277ac60e373e0078b6550b91dcc9fbcc9a42cc77

General

Target
d2d022a3366c1ae252fcb146277ac60e373e0078b6550b91dcc9fbcc9a42cc77
Size 485KB
Sample240620-m2g6estdnc
SHA256 d2d022a3366c1ae252fcb146277ac60e373e0078b6550b91dcc9fbcc9a42cc77
MD5 4c56662fa80c2e376642690efbe5db81
SHA1 1e99ecfdeb83a10ee51eb645961759f8c00b21c3
SHA512 f5851c76d6a5aaefe1ec4eec79604acd61c9ca3329ee4d0772fa0920f7811ba8d200b5cc445ede8610906ca79adaae46a832090ec7c6e537aa8cc3d56f7a8918
SSDEEP 6144:UQrLFSk5LJ47L+mRsp/jsRQWlrPNv0mnjdNhNQxVHNAhSRlhj0Lp:JJSk5L3mRimQWdPNv9nJrQNAjL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2d022a3366c1ae252fcb146277ac60e373e0078b6550b91dcc9fbcc9a42cc77

File Explorer

d2d022a3366c1ae252fcb146277ac60e373e0078b6550b91dcc9fbcc9a42cc77

.exe 485KB

d2d022a3366c1ae252fcb146277ac60e373e0078b6550b91dcc9fbcc9a42cc77

IMPHASH aec527db97155c04ecadc13b1ffbed68
SHA256 d2d022a3366c1ae252fcb146277ac60e373e0078b6550b91dcc9fbcc9a42cc77
MD5 4c56662fa80c2e376642690efbe5db81
SHA1 1e99ecfdeb83a10ee51eb645961759f8c00b21c3
SHA512 f5851c76d6a5aaefe1ec4eec79604acd61c9ca3329ee4d0772fa0920f7811ba8d200b5cc445ede8610906ca79adaae46a832090ec7c6e537aa8cc3d56f7a8918
SSDEEP 6144:UQrLFSk5LJ47L+mRsp/jsRQWlrPNv0mnjdNhNQxVHNAhSRlhj0Lp:JJSk5L3mRimQWdPNv9nJrQNAjL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA GetStringTypeA GlobalAddAtomA GetCommState GetConsoleAliasA InterlockedDecrement SetDefaultCommConfigW GetNamedPipeHandleStateA GetTimeFormatA GetModuleHandleW GetTickCount EnumCalendarInfoExW GlobalAlloc LoadLibraryW SetVolumeMountPointA FormatMessageW WriteConsoleOutputA lstrcpynW LocalReAlloc GetModuleFileNameW RaiseException CreateJobObjectA GetConsoleAliasesW GetLastError GetThreadLocale GetProcAddress GetLongPathNameA SetVolumeLabelW BuildCommDCBW LoadLibraryA WriteConsoleA RegisterWaitForSingleObject SetCalendarInfoW OpenJobObjectW lstrcatW GetConsoleTitleW FindAtomW FileTimeToLocalFileTime OpenFileMappingA EnumCalendarInfoExA FindNextVolumeA AreFileApisANSI HeapAlloc HeapReAlloc GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle HeapSize LCMapStringA LCMapStringW GetStringTypeW ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

d2d022a3366c1ae252fcb146277ac60e373e0078b6550b91dcc9fbcc9a42cc77

kernel32

user32

generic