7234f92276988b82c07ff97ac5cc5e2b2bcfc313ed0c881a217ef2c9878f2eaf

General

Target
7234f92276988b82c07ff97ac5cc5e2b2bcfc313ed0c881a217ef2c9878f2eaf
Size 425KB
Sample240627-2xdprsyfpn
SHA256 7234f92276988b82c07ff97ac5cc5e2b2bcfc313ed0c881a217ef2c9878f2eaf
MD5 fe77f68d75713af1c66ab1e98ab76c07
SHA1 8dd48cbc8174edb6884862b35673b84cc10bbe6f
SHA512 73667ca9fea3a2249520fe92e1caa3be940aa82eeb37a40790dea9b665a55ddd1b6d62594a08fa89462db38488d9737cd021fa5ec8f2a2d2e92a6bb1c9b61fb2
SSDEEP 6144:LA4n+cZIJNpjHICzqu7MJruQPZLhXCdMw8xCNSGlsYiVkZ0ipooqgz9:LnZeNp7sSQxAGw8xCNXbqq9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7234f92276988b82c07ff97ac5cc5e2b2bcfc313ed0c881a217ef2c9878f2eaf

File Explorer

7234f92276988b82c07ff97ac5cc5e2b2bcfc313ed0c881a217ef2c9878f2eaf

.exe 425KB

7234f92276988b82c07ff97ac5cc5e2b2bcfc313ed0c881a217ef2c9878f2eaf

IMPHASH e4019b337e6aa53400bb9378be49b858
SHA256 7234f92276988b82c07ff97ac5cc5e2b2bcfc313ed0c881a217ef2c9878f2eaf
MD5 fe77f68d75713af1c66ab1e98ab76c07
SHA1 8dd48cbc8174edb6884862b35673b84cc10bbe6f
SHA512 73667ca9fea3a2249520fe92e1caa3be940aa82eeb37a40790dea9b665a55ddd1b6d62594a08fa89462db38488d9737cd021fa5ec8f2a2d2e92a6bb1c9b61fb2
SSDEEP 6144:LA4n+cZIJNpjHICzqu7MJruQPZLhXCdMw8xCNSGlsYiVkZ0ipooqgz9:LnZeNp7sSQxAGw8xCNXbqq9
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

39589

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

Polyline RectVisible

user32

OffsetRect

kernel32

CreateFileW HeapSize SetStdHandle WaitForSingleObject CreateThread VirtualAlloc FreeConsole RaiseException InitOnceBeginInitialize InitOnceComplete CloseHandle GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW GetCPInfo IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead GetProcessHeap RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

7234f92276988b82c07ff97ac5cc5e2b2bcfc313ed0c881a217ef2c9878f2eaf

gdi32

user32

kernel32

generic