7918db42bdb96b0c9b2aceda1cdc28d98f074f32ea3e53834d4e0b2403bf3b90

General

Target
7918db42bdb96b0c9b2aceda1cdc28d98f074f32ea3e53834d4e0b2403bf3b90
Size 332KB
Sample240621-ptpxeazdle
SHA256 7918db42bdb96b0c9b2aceda1cdc28d98f074f32ea3e53834d4e0b2403bf3b90
MD5 864d8eb9879f8ab811df82a22683ac74
SHA1 f434f755d8acf1937c60d457882a03829d29662b
SHA512 b02aa2eea5a3aead2bc1f1dd0c6c4af63927eaeaa0d519e4824571e59121b1bd93bc14eea8b1644cad1e08416a4596295a84ac0b7f4ad2eac9ba04a3d4d58b21
SSDEEP 6144:aAYn+pijVxdVsPpeWBMejKK1jeqcI/Gch5nq9/:nYn+pixxd+heWL1j5cYGenqp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7918db42bdb96b0c9b2aceda1cdc28d98f074f32ea3e53834d4e0b2403bf3b90

File Explorer

7918db42bdb96b0c9b2aceda1cdc28d98f074f32ea3e53834d4e0b2403bf3b90

.exe 332KB

7918db42bdb96b0c9b2aceda1cdc28d98f074f32ea3e53834d4e0b2403bf3b90

IMPHASH c74075b6dc6c1f60861ac931cf6b8f8f
SHA256 7918db42bdb96b0c9b2aceda1cdc28d98f074f32ea3e53834d4e0b2403bf3b90
MD5 864d8eb9879f8ab811df82a22683ac74
SHA1 f434f755d8acf1937c60d457882a03829d29662b
SHA512 b02aa2eea5a3aead2bc1f1dd0c6c4af63927eaeaa0d519e4824571e59121b1bd93bc14eea8b1644cad1e08416a4596295a84ac0b7f4ad2eac9ba04a3d4d58b21
SSDEEP 6144:aAYn+pijVxdVsPpeWBMejKK1jeqcI/Gch5nq9/:nYn+pixxd+heWL1j5cYGenqp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA InterlockedCompareExchange GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalFindAtomA LoadLibraryW GetConsoleAliasW SetLastError GetProcAddress SetFileAttributesA LoadLibraryA LoadLibraryExW LocalAlloc FindFirstVolumeMountPointW GetDiskFreeSpaceA GlobalHandle EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA lstrcatW OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW SetStdHandle WriteConsoleW CloseHandle SetFilePointer FlushFileBuffers TlsGetValue FindResourceW IsBadStringPtrW OpenMutexA FindResourceA MultiByteToWideChar GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetLastError IsProcessorFeaturePresent HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree WideCharToMultiByte RtlUnwind LCMapStringW GetStringTypeW HeapSize HeapReAlloc RaiseException GetConsoleCP GetConsoleMode CreateFileW

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementW

advapi32

BackupEventLogA ClearEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

7918db42bdb96b0c9b2aceda1cdc28d98f074f32ea3e53834d4e0b2403bf3b90

kernel32

user32

gdi32

advapi32

generic