c4c8ed1f36cc7c964d45fe8581f9d44a2b71df2d3e898710191a1cdc9776d01c

General

Target
c4c8ed1f36cc7c964d45fe8581f9d44a2b71df2d3e898710191a1cdc9776d01c
Size 282KB
Sample240622-nnentazfpn
SHA256 c4c8ed1f36cc7c964d45fe8581f9d44a2b71df2d3e898710191a1cdc9776d01c
MD5 30c08d35b8313b68f98506e6e050d8aa
SHA1 840d648bf39050078301374b22ccfb00881c84f4
SHA512 786da950b8e57f769dbb1036268c0c137eaf53dab0fe20b158521f0a921c8b58f07b7aa80d05919beb9dac713c5d48a8bd3f209fcc033cf81ece84a8c70ef16d
SSDEEP 6144:MenNKz5S8ALzqLL594MMO5Uh5MufHPtBcUD9TdVVF23M:MenNKzj82rxY5MaVBcUDda3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4c8ed1f36cc7c964d45fe8581f9d44a2b71df2d3e898710191a1cdc9776d01c

File Explorer

c4c8ed1f36cc7c964d45fe8581f9d44a2b71df2d3e898710191a1cdc9776d01c

.exe 282KB

c4c8ed1f36cc7c964d45fe8581f9d44a2b71df2d3e898710191a1cdc9776d01c

IMPHASH 05dcd3e55061f932e25278c361fa9f5f
SHA256 c4c8ed1f36cc7c964d45fe8581f9d44a2b71df2d3e898710191a1cdc9776d01c
MD5 30c08d35b8313b68f98506e6e050d8aa
SHA1 840d648bf39050078301374b22ccfb00881c84f4
SHA512 786da950b8e57f769dbb1036268c0c137eaf53dab0fe20b158521f0a921c8b58f07b7aa80d05919beb9dac713c5d48a8bd3f209fcc033cf81ece84a8c70ef16d
SSDEEP 6144:MenNKz5S8ALzqLL594MMO5Uh5MufHPtBcUD9TdVVF23M:MenNKzj82rxY5MaVBcUDda3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange CreateHardLinkA GetSystemDefaultLCID GetTickCount GlobalFindAtomA LoadLibraryW GetConsoleAliasW IsBadWritePtr IsBadStringPtrA SetLastError GetProcAddress SetFileAttributesA GetDiskFreeSpaceW LoadLibraryA LocalAlloc OpenJobObjectA GetNumberFormatW GlobalHandle EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA LoadLibraryExA OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW SetStdHandle WriteConsoleW CloseHandle SetFilePointer FlushFileBuffers GetConsoleMode FindResourceA TlsGetValue GetComputerNameA FindFirstVolumeMountPointW GetSystemDefaultLangID MultiByteToWideChar DecodePointer EncodePointer GetLastError HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate HeapFree HeapAlloc WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind LCMapStringW GetStringTypeW HeapSize RaiseException GetConsoleCP CreateFileW

user32

DdeCmpStringHandles GetCaretPos CloseWindow GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementA

advapi32

BackupEventLogA ClearEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

c4c8ed1f36cc7c964d45fe8581f9d44a2b71df2d3e898710191a1cdc9776d01c

kernel32

user32

gdi32

advapi32

generic