3dacbd51724d7267ded7bae261b0f9fe20dc878ca9c9f1534f4d7d7f767205c0

General

Target
3dacbd51724d7267ded7bae261b0f9fe20dc878ca9c9f1534f4d7d7f767205c0
Size 399KB
Sample240624-ydal8azbpg
SHA256 3dacbd51724d7267ded7bae261b0f9fe20dc878ca9c9f1534f4d7d7f767205c0
MD5 dfde0091e827eec65d2101c001fbaec4
SHA1 c5bcc17c658945eb4b3dd2ae60fe76d8a7ec4306
SHA512 4653a094f6887a52ade054b1a6f614ac3d6070fe356c8fb9955ee1d4577665bd1b98d7f96411ca7bec335c236620ddbabbd5d3e46ac7341443b29ed18cd9c6b5
SSDEEP 6144:P69LzWNaU0fMRD4OngmKIp/bdQeAXGz7r+xXhxX:E3UaU14egcppKiG/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dacbd51724d7267ded7bae261b0f9fe20dc878ca9c9f1534f4d7d7f767205c0

File Explorer

3dacbd51724d7267ded7bae261b0f9fe20dc878ca9c9f1534f4d7d7f767205c0

.exe 399KB

3dacbd51724d7267ded7bae261b0f9fe20dc878ca9c9f1534f4d7d7f767205c0

IMPHASH 54b29bf7aeed0fb7205b4667e53cc9b9
SHA256 3dacbd51724d7267ded7bae261b0f9fe20dc878ca9c9f1534f4d7d7f767205c0
MD5 dfde0091e827eec65d2101c001fbaec4
SHA1 c5bcc17c658945eb4b3dd2ae60fe76d8a7ec4306
SHA512 4653a094f6887a52ade054b1a6f614ac3d6070fe356c8fb9955ee1d4577665bd1b98d7f96411ca7bec335c236620ddbabbd5d3e46ac7341443b29ed18cd9c6b5
SSDEEP 6144:P69LzWNaU0fMRD4OngmKIp/bdQeAXGz7r+xXhxX:E3UaU14egcppKiG/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10977

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GlobalAddAtomA CreateJobObjectW GetNamedPipeHandleStateA SetVolumeMountPointW GetTimeFormatA GetCommProperties GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleAliasesLengthA ReadConsoleOutputA GetUserDefaultLangID GlobalAlloc LoadLibraryW GetLocaleInfoW GetCalendarInfoW FormatMessageW lstrcpynW LocalReAlloc GetModuleFileNameW RaiseException SetDefaultCommConfigA InterlockedExchange GetLastError GetProcAddress GetNumaHighestNodeNumber LoadLibraryA WriteConsoleA RegisterWaitForSingleObject AddAtomW OpenJobObjectW FoldStringW GetCommTimeouts lstrcatW OpenFileMappingW GetConsoleTitleW BuildCommDCBA GetShortPathNameW FindFirstVolumeW AreFileApisANSI LocalFileTimeToFileTime GetConsoleAliasesW GetComputerNameA MultiByteToWideChar HeapAlloc Sleep ExitProcess GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

advapi32

GetSidSubAuthorityCount

Sharing

General

Malware Config

Signatures

File Explorer

3dacbd51724d7267ded7bae261b0f9fe20dc878ca9c9f1534f4d7d7f767205c0

kernel32

user32

advapi32

generic