28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

Sharing

Copy URL Twitter E-mail

General

Target
28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c
Size 396KB
Sample240625-tpblfasgnk
SHA256 28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c
MD5 8a21a59fc5ff1ca674a0ab50b7bc102c
SHA1 2858c55d923ae0273c5fd60aa30a4d64a71267af
SHA512 a11e0285cd26de484bbcadc87c650d45ed003bd5deaba5485e9d1ada6213e6b8ba12b8e3d64877d6a5ef0b9a9f798fc45cb352931d26fc835a5c3aba90424138
SSDEEP 6144:uvLLMUbBN2tQ1W3q6Dh16gA92gm657HPWIVOa98kI/N3:IvMe6tQYDCBwgm60gOMiN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

File Explorer

28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

.exe 396KB

28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

IMPHASH 3fbbd2814932cb3d994a2a2b0332e421
SHA256 28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c
MD5 8a21a59fc5ff1ca674a0ab50b7bc102c
SHA1 2858c55d923ae0273c5fd60aa30a4d64a71267af
SHA512 a11e0285cd26de484bbcadc87c650d45ed003bd5deaba5485e9d1ada6213e6b8ba12b8e3d64877d6a5ef0b9a9f798fc45cb352931d26fc835a5c3aba90424138
SSDEEP 6144:uvLLMUbBN2tQ1W3q6Dh16gA92gm657HPWIVOa98kI/N3:IvMe6tQYDCBwgm60gOMiN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID GetCommProperties GetModuleHandleW GetTickCount EnumCalendarInfoExW ReadConsoleOutputA GlobalAlloc LoadLibraryW SetVolumeMountPointA GetConsoleAliasExesLengthW lstrcpynW LocalReAlloc WriteConsoleW GetModuleFileNameW GetConsoleAliasesW InterlockedExchange CreateJobObjectW GetProcAddress LoadLibraryA UnhandledExceptionFilter AddAtomA OpenJobObjectW FoldStringW GetCommTimeouts lstrcatW OpenFileMappingW GetConsoleTitleW BuildCommDCBA FindFirstVolumeW GlobalAddAtomW AreFileApisANSI GetNumaProcessorNode OpenJobObjectA GetLastError GetComputerNameA CloseHandle HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile CreateFileA

user32

LoadIconA

gdi32

GetCharWidth32W

advapi32

EnumDependentServicesW

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

kernel32

user32

gdi32

advapi32

ole32

generic