48fa620f081b673ffaffd2666e9cb4803facb5070aa045d7363e0c4c31b2cf9e

Sharing

Copy URL Twitter E-mail

General

Target
48fa620f081b673ffaffd2666e9cb4803facb5070aa045d7363e0c4c31b2cf9e
Size 313KB
Sample240710-edv4daxane
SHA256 48fa620f081b673ffaffd2666e9cb4803facb5070aa045d7363e0c4c31b2cf9e
MD5 dbce4e899eadfd9d3d357e1227b759a9
SHA1 449016ae13094fc3532b351e2d531dc61611a2fe
SHA512 d7b95e3a5463f2e0e606e8f45230dc056b58ffb098efdc08d14e48a9ea17eaacb4c84fc2973c59e860b0c63a9fa882eac37ba2e7491bb0dfa54efcba347ac2a2
SSDEEP 3072:T/HtoFrkiXqJBjfK93XyBgRU0hjyzzgIZCpdap2f7nRbKUmwp8JdM:LOrkCWBjfdWU0J6zgLdVnRbKUJp8TM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48fa620f081b673ffaffd2666e9cb4803facb5070aa045d7363e0c4c31b2cf9e

File Explorer

48fa620f081b673ffaffd2666e9cb4803facb5070aa045d7363e0c4c31b2cf9e

.exe 313KB

48fa620f081b673ffaffd2666e9cb4803facb5070aa045d7363e0c4c31b2cf9e

IMPHASH 5d2c2864321344c11f1d49b7f3118944
SHA256 48fa620f081b673ffaffd2666e9cb4803facb5070aa045d7363e0c4c31b2cf9e
MD5 dbce4e899eadfd9d3d357e1227b759a9
SHA1 449016ae13094fc3532b351e2d531dc61611a2fe
SHA512 d7b95e3a5463f2e0e606e8f45230dc056b58ffb098efdc08d14e48a9ea17eaacb4c84fc2973c59e860b0c63a9fa882eac37ba2e7491bb0dfa54efcba347ac2a2
SSDEEP 3072:T/HtoFrkiXqJBjfK93XyBgRU0hjyzzgIZCpdap2f7nRbKUmwp8JdM:LOrkCWBjfdWU0J6zgLdVnRbKUJp8TM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8503

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile FindResourceW LocalCompact WriteConsoleInputA GetComputerNameW GetWindowsDirectoryA GetDateFormatA SetProcessPriorityBoost GlobalFindAtomA LoadLibraryW FreeConsole CreateEventA GetModuleFileNameW CreateFileW GetACP IsBadStringPtrA ReplaceFileA CreateDirectoryA GetLastError CommConfigDialogA GetProcAddress GlobalFree LocalAlloc EnumResourceTypesW GetModuleHandleA CancelIo OpenFileMappingW GetWindowsDirectoryW SetFileAttributesW RaiseException HeapReAlloc HeapAlloc GetStringTypeW MultiByteToWideChar SetLastError RemoveVectoredExceptionHandler LCMapStringW HeapSize RtlUnwind Sleep IsValidCodePage HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapCreate SetUnhandledExceptionFilter GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection EnterCriticalSection GetCPInfo GetOEMCP

user32

GetKeyboardLayoutNameA SetMessageExtraInfo GetCaretPos DdeCmpStringHandles GetClassInfoW InsertMenuItemW CharUpperBuffA

advapi32

GetLengthSid

ole32

CoSuspendClassObjects CoUnmarshalHresult

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

48fa620f081b673ffaffd2666e9cb4803facb5070aa045d7363e0c4c31b2cf9e

kernel32

user32

advapi32

ole32

winhttp

generic