1790346741deb913cdae78cc9e083784d4e5022fb84b0cc3932b63650d9c1c08

General

Target
1790346741deb913cdae78cc9e083784d4e5022fb84b0cc3932b63650d9c1c08
Size 312KB
Sample240713-gr8mqs1cmc
SHA256 1790346741deb913cdae78cc9e083784d4e5022fb84b0cc3932b63650d9c1c08
MD5 c8aaa3cc52dfb2f7a764d1108942889a
SHA1 029a0259195209ca22275f76f6d483064aab9bdb
SHA512 0686c3aff455b7ba0c56e3eb179d0223c64e7fb9892873ac0751c76d284ec2fe58889837c0d872ec04c37da072578c5e95b6b25e962fb3a8ec2ff56178939494
SSDEEP 3072:gklZuXxfUBnFL8HkcL9bbdjQZRh8pF63ZSir38Uryj7X53:gOuXxrEC9bZch8YrKX5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1790346741deb913cdae78cc9e083784d4e5022fb84b0cc3932b63650d9c1c08

File Explorer

1790346741deb913cdae78cc9e083784d4e5022fb84b0cc3932b63650d9c1c08

.exe 312KB

1790346741deb913cdae78cc9e083784d4e5022fb84b0cc3932b63650d9c1c08

IMPHASH b088bdcc88c1fb82de9ef9e497179231
SHA256 1790346741deb913cdae78cc9e083784d4e5022fb84b0cc3932b63650d9c1c08
MD5 c8aaa3cc52dfb2f7a764d1108942889a
SHA1 029a0259195209ca22275f76f6d483064aab9bdb
SHA512 0686c3aff455b7ba0c56e3eb179d0223c64e7fb9892873ac0751c76d284ec2fe58889837c0d872ec04c37da072578c5e95b6b25e962fb3a8ec2ff56178939494
SSDEEP 3072:gklZuXxfUBnFL8HkcL9bbdjQZRh8pF63ZSir38Uryj7X53:gOuXxrEC9bZch8YrKX5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW SetEndOfFile FindResourceW LocalCompact SetConsoleTextAttribute CreateDirectoryW LoadLibraryW IsBadCodePtr CreateEventA GetModuleFileNameW GetACP ReplaceFileA GlobalUnlock GetLastError SetLastError GetProcAddress AttachConsole CreateJobSet FindResourceA LoadLibraryA LocalAlloc FindAtomA EnumResourceTypesW GetModuleHandleA ReadConsoleInputW TerminateJobObject GetWindowsDirectoryW CheckRemoteDebuggerPresent GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc HeapSize SetFileAttributesA CreateFileA HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW ExitProcess DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapFree WriteFile GetStdHandle HeapCreate GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection Sleep RtlUnwind GetCPInfo GetOEMCP IsValidCodePage RaiseException

user32

CharUpperBuffA SetCursorPos LoadMenuW GetCaretPos GetSysColorBrush IsWindow GetMessageTime GetKeyboardLayoutNameA

advapi32

ClearEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

1790346741deb913cdae78cc9e083784d4e5022fb84b0cc3932b63650d9c1c08

kernel32

user32

advapi32

generic