656b9e420e76b9dc7d6e8245dc271b743939e86b01bcd1366eb38b8307252963

General

Target
656b9e420e76b9dc7d6e8245dc271b743939e86b01bcd1366eb38b8307252963
Size 399KB
Sample240624-tdw31atepp
SHA256 656b9e420e76b9dc7d6e8245dc271b743939e86b01bcd1366eb38b8307252963
MD5 cf7902b67db8288cc5a10eb5e324b556
SHA1 9e460e511ad36728dda16402486eb78423437033
SHA512 0d828ac65a2e7b7e246b5f0693a58f414c2ab7d7e9ff5db148375fd767c5d84080de25f364257913b88668ce09a39ec61a964df5e8f30f383007b9760f09935a
SSDEEP 3072:+MZRU/Lg5cWw8+2mYgv7lTZQeO9fZt4vzhfvu+DBCh4LvQmv0H5Y3AvYvcYb5LLi:+UwL5WwbaSTAFZt4p2+Um7Qmvf3Avqd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
656b9e420e76b9dc7d6e8245dc271b743939e86b01bcd1366eb38b8307252963

File Explorer

656b9e420e76b9dc7d6e8245dc271b743939e86b01bcd1366eb38b8307252963

.exe 399KB

656b9e420e76b9dc7d6e8245dc271b743939e86b01bcd1366eb38b8307252963

IMPHASH 381ef9e1c5504cdd97898c287558450d
SHA256 656b9e420e76b9dc7d6e8245dc271b743939e86b01bcd1366eb38b8307252963
MD5 cf7902b67db8288cc5a10eb5e324b556
SHA1 9e460e511ad36728dda16402486eb78423437033
SHA512 0d828ac65a2e7b7e246b5f0693a58f414c2ab7d7e9ff5db148375fd767c5d84080de25f364257913b88668ce09a39ec61a964df5e8f30f383007b9760f09935a
SSDEEP 3072:+MZRU/Lg5cWw8+2mYgv7lTZQeO9fZt4vzhfvu+DBCh4LvQmv0H5Y3AvYvcYb5LLi:+UwL5WwbaSTAFZt4p2+Um7Qmvf3Avqd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10977

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA SetDefaultCommConfigW CreateJobObjectW GetNamedPipeHandleStateA SetVolumeMountPointW GetTimeFormatA GetCommProperties GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesLengthA ReadConsoleOutputA GetUserDefaultLangID GlobalAlloc LoadLibraryW GetLocaleInfoW GetCalendarInfoW FormatMessageW lstrcpynW LocalReAlloc GetModuleFileNameW RaiseException GetConsoleAliasesLengthW InterlockedExchange GetLastError GetProcAddress GetNumaHighestNodeNumber LoadLibraryA WriteConsoleA RegisterWaitForSingleObject AddAtomW OpenJobObjectW FoldStringW GetCommTimeouts lstrcatW OpenFileMappingW GetConsoleTitleW BuildCommDCBA GetShortPathNameW FindFirstVolumeW AreFileApisANSI LocalFileTimeToFileTime GetConsoleAliasesW SetDefaultCommConfigA MultiByteToWideChar HeapAlloc Sleep ExitProcess GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

advapi32

GetSidSubAuthorityCount

Sharing

General

Malware Config

Signatures

File Explorer

656b9e420e76b9dc7d6e8245dc271b743939e86b01bcd1366eb38b8307252963

kernel32

user32

advapi32

generic