733c6bc982f3e286bc4999b8d2e2671ee88a73558b2a01445e1e8505d3d7c922

General

Target
733c6bc982f3e286bc4999b8d2e2671ee88a73558b2a01445e1e8505d3d7c922
Size 402KB
Sample240621-fwfbbasgnk
SHA256 733c6bc982f3e286bc4999b8d2e2671ee88a73558b2a01445e1e8505d3d7c922
MD5 f00fd453b110d8dfdc6907cf2e0e35e3
SHA1 b295fa6b39e24c40d8040bd33f80fa80d095999b
SHA512 08092f3bdb0b19289f6f61f67f66d3cd35b9ebfeea8439f306c17670021186af8c9cfa76b6f376458c9bf6cc385b2a9e52d55e3d0ad20ce2ac60e1f19ab10721
SSDEEP 6144:jL9f8EQ+kyI+/1NjZnle7fk7uI4S96g//:yE2sRl7uI9H
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
733c6bc982f3e286bc4999b8d2e2671ee88a73558b2a01445e1e8505d3d7c922

File Explorer

733c6bc982f3e286bc4999b8d2e2671ee88a73558b2a01445e1e8505d3d7c922

.exe 402KB

733c6bc982f3e286bc4999b8d2e2671ee88a73558b2a01445e1e8505d3d7c922

IMPHASH f5426f6c43b5503f321c9f8f3816a4bc
SHA256 733c6bc982f3e286bc4999b8d2e2671ee88a73558b2a01445e1e8505d3d7c922
MD5 f00fd453b110d8dfdc6907cf2e0e35e3
SHA1 b295fa6b39e24c40d8040bd33f80fa80d095999b
SHA512 08092f3bdb0b19289f6f61f67f66d3cd35b9ebfeea8439f306c17670021186af8c9cfa76b6f376458c9bf6cc385b2a9e52d55e3d0ad20ce2ac60e1f19ab10721
SSDEEP 6144:jL9f8EQ+kyI+/1NjZnle7fk7uI4S96g//:yE2sRl7uI9H
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue GlobalCompact FindResourceW LoadLibraryExW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalFindAtomA LoadLibraryW GetConsoleAliasW OpenMutexW GetLastError SetLastError GetProcAddress IsBadStringPtrW LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW GetDiskFreeSpaceA OpenJobObjectW EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA lstrcatW OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW HeapSize SetFileAttributesA FindResourceA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementW

Sharing

General

Malware Config

Signatures

File Explorer

733c6bc982f3e286bc4999b8d2e2671ee88a73558b2a01445e1e8505d3d7c922

kernel32

user32

gdi32

generic