139d2ee7ad899933241e45e1778f17ee6a4ba319a6246a018ceb65c5185153cd

Sharing

Copy URL Twitter E-mail

General

Target
139d2ee7ad899933241e45e1778f17ee6a4ba319a6246a018ceb65c5185153cd
Size 322KB
Sample240625-plsnbssfjq
SHA256 139d2ee7ad899933241e45e1778f17ee6a4ba319a6246a018ceb65c5185153cd
MD5 94d7d520a48b84eb1c80ca7dc729a5a8
SHA1 9ad795c261ec1f8c93936f0e4f76d77413b7d5e3
SHA512 422142f048fca8ecb428f1b1f2c29699e538cffbd9bcd93ee54c1b3416cc92016e95244d7e9719e9db15d4fdecbb43b8066ef10b009f930a249fd46f6d32bddc
SSDEEP 3072:mOfwLk3mjSpF95twD50atBS5xnt4Lt1g1Ek1EJxTEqS:mOoL8mju/LwSaat81iNH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
139d2ee7ad899933241e45e1778f17ee6a4ba319a6246a018ceb65c5185153cd

File Explorer

139d2ee7ad899933241e45e1778f17ee6a4ba319a6246a018ceb65c5185153cd

.exe 322KB

139d2ee7ad899933241e45e1778f17ee6a4ba319a6246a018ceb65c5185153cd

IMPHASH 4345ed51b7bcdd336807a3f5f786979a
SHA256 139d2ee7ad899933241e45e1778f17ee6a4ba319a6246a018ceb65c5185153cd
MD5 94d7d520a48b84eb1c80ca7dc729a5a8
SHA1 9ad795c261ec1f8c93936f0e4f76d77413b7d5e3
SHA512 422142f048fca8ecb428f1b1f2c29699e538cffbd9bcd93ee54c1b3416cc92016e95244d7e9719e9db15d4fdecbb43b8066ef10b009f930a249fd46f6d32bddc
SSDEEP 3072:mOfwLk3mjSpF95twD50atBS5xnt4Lt1g1Ek1EJxTEqS:mOoL8mju/LwSaat81iNH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommProperties GetModuleHandleW GetTickCount EnumCalendarInfoExW ReadConsoleOutputA GlobalAlloc LoadLibraryW SetVolumeMountPointA GetConsoleAliasExesLengthW lstrcpynW LocalReAlloc WriteConsoleW GetModuleFileNameW GetConsoleAliasesW InterlockedExchange GetLastError GetUserDefaultLCID LoadLibraryA UnhandledExceptionFilter AddAtomA OpenJobObjectW FoldStringW GetCommTimeouts lstrcatW OpenFileMappingW GetConsoleTitleW BuildCommDCBA FindFirstVolumeW GlobalAddAtomW AreFileApisANSI GetNumaProcessorNode CreateJobObjectW GetProcAddress GetComputerNameA HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

gdi32

GetCharWidth32W

advapi32

EnumDependentServicesW

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

139d2ee7ad899933241e45e1778f17ee6a4ba319a6246a018ceb65c5185153cd

kernel32

user32

gdi32

advapi32

ole32

generic