744ec52f480cb86b7e84fbbfe4b1880f57219dae5683b746f88d6ee4ba394751

General

Target
744ec52f480cb86b7e84fbbfe4b1880f57219dae5683b746f88d6ee4ba394751
Size 780KB
Sample240624-k4ef7svbrf
SHA256 744ec52f480cb86b7e84fbbfe4b1880f57219dae5683b746f88d6ee4ba394751
MD5 9bd737b220a4040dbcaf17f48be54a98
SHA1 9a64f521040e7250e8ae523cf2cc8f75753e4cf7
SHA512 135e292c99e65ad22b20d446130f4a96e1de896a642eb5cf262957ad5fe78f867cc980270d8e8b636615ecbf4f539f8330bf1664aea2a1c0005a441d0f838d68
SSDEEP 24576:cOrc1njeVCf3GFh6h8PXzUaoeu9Qdzw9pTG:Zc1jqC4JzUae9m2pG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
744ec52f480cb86b7e84fbbfe4b1880f57219dae5683b746f88d6ee4ba394751

File Explorer

744ec52f480cb86b7e84fbbfe4b1880f57219dae5683b746f88d6ee4ba394751

.exe 780KB

744ec52f480cb86b7e84fbbfe4b1880f57219dae5683b746f88d6ee4ba394751

IMPHASH 6f282544cf2ad0905a74ff9f4071eba0
SHA256 744ec52f480cb86b7e84fbbfe4b1880f57219dae5683b746f88d6ee4ba394751
MD5 9bd737b220a4040dbcaf17f48be54a98
SHA1 9a64f521040e7250e8ae523cf2cc8f75753e4cf7
SHA512 135e292c99e65ad22b20d446130f4a96e1de896a642eb5cf262957ad5fe78f867cc980270d8e8b636615ecbf4f539f8330bf1664aea2a1c0005a441d0f838d68
SSDEEP 24576:cOrc1njeVCf3GFh6h8PXzUaoeu9Qdzw9pTG:Zc1jqC4JzUae9m2pG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile SetDefaultCommConfigW GetModuleHandleW GetProcessHeap GetWindowsDirectoryA WaitNamedPipeW ActivateActCtx GetConsoleCP GetSystemPowerStatus GetCalendarInfoA lstrcpynW GetFileAttributesW lstrlenW ReleaseSemaphore GetProcAddress AllocConsole ResetEvent LocalAlloc HeapLock HeapWalk GetModuleFileNameA GetOEMCP GetModuleHandleA CreateMutexA GetPrivateProfileSectionA VirtualProtect SetFileShortNameA DeleteFileW FindActCtxSectionStringW WriteProcessMemory LCMapStringW CommConfigDialogW CreateFileW WriteConsoleW HeapUnlock OutputDebugStringW FlushFileBuffers EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree ReadFile GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize SetFilePointerEx GetConsoleMode ReadConsoleW GetStdHandle GetFileType CloseHandle GetCurrentThreadId WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage HeapReAlloc LoadLibraryExW SetStdHandle

user32

GetCaretPos

advapi32

DeregisterEventSource

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

744ec52f480cb86b7e84fbbfe4b1880f57219dae5683b746f88d6ee4ba394751

kernel32

user32

advapi32

msimg32

generic