90d48375e2956f7ac14968e44318b801d04520b22cb7bd651ef4b159177382a2

General

Target
90d48375e2956f7ac14968e44318b801d04520b22cb7bd651ef4b159177382a2
Size 344KB
Sample240713-jyn8savfmd
SHA256 90d48375e2956f7ac14968e44318b801d04520b22cb7bd651ef4b159177382a2
MD5 674fbc036f8ad0fede61a6c6e32a7050
SHA1 5d0698c808c9cc6c65fbe28baff792a089ffff6f
SHA512 2d73ba1b20aa5e4a8700f81efad411d0e20bcade99c7b9f1a205788f9c33b6c513fbe48d6bf53e3e15ca617632a38946db7e2bb196d05b555fb0c393346563bc
SSDEEP 6144:jhZzA9HCJ18r0nm2ZFQwy1VVdGkrhPpQ8:31wrsmMFQwyOkr1a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90d48375e2956f7ac14968e44318b801d04520b22cb7bd651ef4b159177382a2

File Explorer

90d48375e2956f7ac14968e44318b801d04520b22cb7bd651ef4b159177382a2

.exe 344KB

90d48375e2956f7ac14968e44318b801d04520b22cb7bd651ef4b159177382a2

IMPHASH b088bdcc88c1fb82de9ef9e497179231
SHA256 90d48375e2956f7ac14968e44318b801d04520b22cb7bd651ef4b159177382a2
MD5 674fbc036f8ad0fede61a6c6e32a7050
SHA1 5d0698c808c9cc6c65fbe28baff792a089ffff6f
SHA512 2d73ba1b20aa5e4a8700f81efad411d0e20bcade99c7b9f1a205788f9c33b6c513fbe48d6bf53e3e15ca617632a38946db7e2bb196d05b555fb0c393346563bc
SSDEEP 6144:jhZzA9HCJ18r0nm2ZFQwy1VVdGkrhPpQ8:31wrsmMFQwyOkr1a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW SetEndOfFile FindResourceW LocalCompact SetConsoleTextAttribute CreateDirectoryW LoadLibraryW IsBadCodePtr CreateEventA GetModuleFileNameW GetACP ReplaceFileA GlobalUnlock GetLastError SetLastError GetProcAddress AttachConsole CreateJobSet FindResourceA LoadLibraryA LocalAlloc FindAtomA EnumResourceTypesW GetModuleHandleA ReadConsoleInputW TerminateJobObject GetWindowsDirectoryW CheckRemoteDebuggerPresent GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc HeapSize SetFileAttributesA CreateFileA HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW ExitProcess DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapFree WriteFile GetStdHandle HeapCreate GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection Sleep RtlUnwind GetCPInfo GetOEMCP IsValidCodePage RaiseException

user32

CharUpperBuffA SetCursorPos LoadMenuW GetCaretPos GetSysColorBrush IsWindow GetMessageTime GetKeyboardLayoutNameA

advapi32

ClearEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

90d48375e2956f7ac14968e44318b801d04520b22cb7bd651ef4b159177382a2

kernel32

user32

advapi32

generic