7ac35173cf6b74b6cb9bf10905b321d5d6e849501e81fac5cae9f4a463286e6f

General

Target
7ac35173cf6b74b6cb9bf10905b321d5d6e849501e81fac5cae9f4a463286e6f
Size 282KB
Sample240622-kvvf3ascnc
SHA256 7ac35173cf6b74b6cb9bf10905b321d5d6e849501e81fac5cae9f4a463286e6f
MD5 d70be0fa9642446e649307d9295214ad
SHA1 54d80a466f3a1f7ea1cf9d4491763d3aa4b2418a
SHA512 a6f9975e93efcb283ff2f39f7f258b42d9f62d3ff0a1f58d200eea125d9a30355d18542f63854f69391a1b21c1297cdf1e84b903a58cbd23db9f0b2d30a01b86
SSDEEP 6144:Y4cwBYTn/IpoD28rjFQfnhwnSkBAzLgLwVVF23M:Y4cwBY7/IOD2PwGzcLR3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ac35173cf6b74b6cb9bf10905b321d5d6e849501e81fac5cae9f4a463286e6f

File Explorer

7ac35173cf6b74b6cb9bf10905b321d5d6e849501e81fac5cae9f4a463286e6f

.exe 282KB

7ac35173cf6b74b6cb9bf10905b321d5d6e849501e81fac5cae9f4a463286e6f

IMPHASH 6f9d8e5251c0c8c2f11f55a3c256c969
SHA256 7ac35173cf6b74b6cb9bf10905b321d5d6e849501e81fac5cae9f4a463286e6f
MD5 d70be0fa9642446e649307d9295214ad
SHA1 54d80a466f3a1f7ea1cf9d4491763d3aa4b2418a
SHA512 a6f9975e93efcb283ff2f39f7f258b42d9f62d3ff0a1f58d200eea125d9a30355d18542f63854f69391a1b21c1297cdf1e84b903a58cbd23db9f0b2d30a01b86
SSDEEP 6144:Y4cwBYTn/IpoD28rjFQfnhwnSkBAzLgLwVVF23M:Y4cwBY7/IOD2PwGzcLR3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA InterlockedCompareExchange CreateHardLinkA GetSystemDefaultLCID GetTickCount GlobalFindAtomA LoadLibraryW GetConsoleAliasW IsBadWritePtr IsBadStringPtrA SetLastError GetProcAddress SetFileAttributesA GetDiskFreeSpaceW LoadLibraryA OpenMutexA TlsGetValue FindFirstVolumeMountPointW GetNumberFormatW GlobalHandle EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA LoadLibraryExA OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW SetStdHandle WriteConsoleW CloseHandle SetFilePointer FlushFileBuffers FindResourceA GetConsoleAliasesLengthW GetComputerNameA LocalAlloc GetSystemDefaultLangID MultiByteToWideChar DecodePointer EncodePointer GetLastError HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate HeapFree HeapAlloc WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind LCMapStringW GetStringTypeW HeapSize RaiseException GetConsoleCP GetConsoleMode CreateFileW

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementA

advapi32

BackupEventLogA ClearEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

7ac35173cf6b74b6cb9bf10905b321d5d6e849501e81fac5cae9f4a463286e6f

kernel32

user32

gdi32

advapi32

generic