3f6d052baefd62e33e7ac301d6f1c37d5874d823c422e097324fae9e0c0451bd

General

Target
3f6d052baefd62e33e7ac301d6f1c37d5874d823c422e097324fae9e0c0451bd
Size 406KB
Sample240621-lt52vayfpk
SHA256 3f6d052baefd62e33e7ac301d6f1c37d5874d823c422e097324fae9e0c0451bd
MD5 0bd32722e092eff1ef9e88a945824715
SHA1 af868c26f0a9cce64e30020e99d014efafa22e62
SHA512 eab9d5f9f27adff92612df9a8a76ca403f7acb99a528772f9d389f7f6dc50919340c6e1c679f405b79b72ee8419d710fb5dcdcf2e1b8df5a74960437423ed2c7
SSDEEP 6144:BAL8MLRdnsW4U15jicEvsPqd3OWy1e4R2naajY/:B+1x515icEMol04a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6d052baefd62e33e7ac301d6f1c37d5874d823c422e097324fae9e0c0451bd

File Explorer

3f6d052baefd62e33e7ac301d6f1c37d5874d823c422e097324fae9e0c0451bd

.exe 406KB

3f6d052baefd62e33e7ac301d6f1c37d5874d823c422e097324fae9e0c0451bd

IMPHASH f5426f6c43b5503f321c9f8f3816a4bc
SHA256 3f6d052baefd62e33e7ac301d6f1c37d5874d823c422e097324fae9e0c0451bd
MD5 0bd32722e092eff1ef9e88a945824715
SHA1 af868c26f0a9cce64e30020e99d014efafa22e62
SHA512 eab9d5f9f27adff92612df9a8a76ca403f7acb99a528772f9d389f7f6dc50919340c6e1c679f405b79b72ee8419d710fb5dcdcf2e1b8df5a74960437423ed2c7
SSDEEP 6144:BAL8MLRdnsW4U15jicEvsPqd3OWy1e4R2naajY/:B+1x515icEMol04a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue GlobalCompact FindResourceW LoadLibraryExW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalFindAtomA LoadLibraryW GetConsoleAliasW OpenMutexW GetLastError SetLastError GetProcAddress IsBadStringPtrW LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW GetDiskFreeSpaceA OpenJobObjectW EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA lstrcatW OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW HeapSize SetFileAttributesA FindResourceA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementW

Sharing

General

Malware Config

Signatures

File Explorer

3f6d052baefd62e33e7ac301d6f1c37d5874d823c422e097324fae9e0c0451bd

kernel32

user32

gdi32

generic