8fd1f9fdfe550d25b906fb9db0582c8f23ced386cb56106689dc9aa893269ff2

General

Target
8fd1f9fdfe550d25b906fb9db0582c8f23ced386cb56106689dc9aa893269ff2
Size 162KB
Sample240703-spcytsverg
SHA256 8fd1f9fdfe550d25b906fb9db0582c8f23ced386cb56106689dc9aa893269ff2
MD5 2ef25e29fd3a21efa1faa50351097688
SHA1 37aefc3d1d188fdd0c6ece1a42e57be753485e67
SHA512 adc9494c029c6b649ffedb55daa547a16637b9951f1723f6b52f004183f7a3233e7dad321ad0f4a415886837dc2ebe1737e2078050d2f42cd3ac951ad801c6dc
SSDEEP 1536:tHQL7nEDiaztjtahVZetOObbsrm5kurI62MQnum+v815V6Ku4xfrmbFeSpjqy2Om:twLrmBjgZ0symO4u1815+GkFNqynj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fd1f9fdfe550d25b906fb9db0582c8f23ced386cb56106689dc9aa893269ff2

File Explorer

8fd1f9fdfe550d25b906fb9db0582c8f23ced386cb56106689dc9aa893269ff2

.exe 162KB

8fd1f9fdfe550d25b906fb9db0582c8f23ced386cb56106689dc9aa893269ff2

IMPHASH 26b20b2808041724a94fb2624d73bdc4
SHA256 8fd1f9fdfe550d25b906fb9db0582c8f23ced386cb56106689dc9aa893269ff2
MD5 2ef25e29fd3a21efa1faa50351097688
SHA1 37aefc3d1d188fdd0c6ece1a42e57be753485e67
SHA512 adc9494c029c6b649ffedb55daa547a16637b9951f1723f6b52f004183f7a3233e7dad321ad0f4a415886837dc2ebe1737e2078050d2f42cd3ac951ad801c6dc
SSDEEP 1536:tHQL7nEDiaztjtahVZetOObbsrm5kurI62MQnum+v815V6Ku4xfrmbFeSpjqy2Om:twLrmBjgZ0symO4u1815+GkFNqynj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6011

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetModuleHandleExW SleepEx GetModuleHandleW GetTickCount GetConsoleAliasesA ReadConsoleOutputA GlobalAlloc SetVolumeMountPointA GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetModuleFileNameW ZombifyActCtx GetProcAddress BuildCommDCBW GetAtomNameA LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd SetFileApisToANSI AddAtomA OpenJobObjectW FoldStringA lstrcatW EnumDateFormatsW FindFirstVolumeA SetLastError GetComputerNameA CreateFileA GetConsoleOutputCP GetLastError HeapFree MultiByteToWideChar GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep HeapSize ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle CloseHandle WriteConsoleA

gdi32

GetBoundsRect

ole32

CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

8fd1f9fdfe550d25b906fb9db0582c8f23ced386cb56106689dc9aa893269ff2

kernel32

gdi32

ole32

generic