339abf17eb0f812bf619f2034c9ae48fd5f65a3a419c150f198db6df840fc5ac

Sharing

Copy URL Twitter E-mail

General

Target
339abf17eb0f812bf619f2034c9ae48fd5f65a3a419c150f198db6df840fc5ac
Size 314KB
Sample240709-zvb22sxcnf
SHA256 339abf17eb0f812bf619f2034c9ae48fd5f65a3a419c150f198db6df840fc5ac
MD5 7352f9295bc86d93a328dfa62c590f7c
SHA1 b37d21ea87a9888fca9a4d4c62984a9e0df8b6db
SHA512 8a780cb8f4439cff34fed11ac0fdbd41a78a1526a91e71208c9a6bac381f5c739df6220d10b8ad2cf34547cd3a5454d87bdf25d759f10b1ddf9eb8ce17b756dc
SSDEEP 3072:UborIIgwhz4Brx/PijA34j6ai4JFMKAXitaxYSkvo56ARVk604ChUmwp8JjM:oorgwheMM34G55p1V56AVCNhUJp8NM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
339abf17eb0f812bf619f2034c9ae48fd5f65a3a419c150f198db6df840fc5ac

File Explorer

339abf17eb0f812bf619f2034c9ae48fd5f65a3a419c150f198db6df840fc5ac

.exe 314KB

339abf17eb0f812bf619f2034c9ae48fd5f65a3a419c150f198db6df840fc5ac

IMPHASH b18351593449506f4a27066556c25f68
SHA256 339abf17eb0f812bf619f2034c9ae48fd5f65a3a419c150f198db6df840fc5ac
MD5 7352f9295bc86d93a328dfa62c590f7c
SHA1 b37d21ea87a9888fca9a4d4c62984a9e0df8b6db
SHA512 8a780cb8f4439cff34fed11ac0fdbd41a78a1526a91e71208c9a6bac381f5c739df6220d10b8ad2cf34547cd3a5454d87bdf25d759f10b1ddf9eb8ce17b756dc
SSDEEP 3072:UborIIgwhz4Brx/PijA34j6ai4JFMKAXitaxYSkvo56ARVk604ChUmwp8JjM:oorgwheMM34G55p1V56AVCNhUJp8NM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8539

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA IsBadStringPtrW CommConfigDialogA SetEndOfFile FindResourceW LocalCompact WriteConsoleInputA GetComputerNameW SetProcessPriorityBoost GlobalFindAtomA LoadLibraryW FreeConsole CreateEventA GetModuleFileNameW CreateFileW GetACP ReplaceFileA CreateDirectoryA GetLastError RemoveVectoredExceptionHandler GetProcAddress GlobalFree LocalAlloc EnumResourceTypesW GetModuleHandleA CancelIo GetWindowsDirectoryW OpenFileMappingA SetFileAttributesW HeapReAlloc HeapAlloc HeapSize GetStringTypeW SetLastError GetDateFormatW MultiByteToWideChar LCMapStringW RtlUnwind Sleep HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapCreate SetUnhandledExceptionFilter GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection RaiseException

user32

GetKeyboardLayoutNameA SetMessageExtraInfo GetCaretPos DdeCmpStringHandles GetClassInfoW InsertMenuItemW CharUpperBuffA

advapi32

GetLengthSid

ole32

CoSuspendClassObjects CoMarshalHresult

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

339abf17eb0f812bf619f2034c9ae48fd5f65a3a419c150f198db6df840fc5ac

kernel32

user32

advapi32

ole32

winhttp

generic