7317f71a2df1b902823f48f98bf1e685e60a7819f1041ff35491a5124af4439f

General

Target
7317f71a2df1b902823f48f98bf1e685e60a7819f1041ff35491a5124af4439f
Size 320KB
Sample240714-by2vwavbrd
SHA256 7317f71a2df1b902823f48f98bf1e685e60a7819f1041ff35491a5124af4439f
MD5 e38fd50fc009b6eacccc04af63435452
SHA1 1921a04066237adbbebcf3e3f1beb1e6c7fee15c
SHA512 d8a93cf65c2c4e481e2f64a6f695b5ea2cbfab5e6b3b9c84feb32d1c2227d7adf0e69e6fc3c7eb4759e684261768e9ddf149676633ee55136f7dc75d3c7d5c59
SSDEEP 3072:s+AgTrwgXX3x57Aw7OaS6oVNT/1Xgs1nJXlV02BZmwwdCbKS4:sMrzn8wlADnJXD02/7KS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7317f71a2df1b902823f48f98bf1e685e60a7819f1041ff35491a5124af4439f

File Explorer

7317f71a2df1b902823f48f98bf1e685e60a7819f1041ff35491a5124af4439f

.exe 320KB

7317f71a2df1b902823f48f98bf1e685e60a7819f1041ff35491a5124af4439f

IMPHASH 3e14c881bae1a3bb325eea058df0a11c
SHA256 7317f71a2df1b902823f48f98bf1e685e60a7819f1041ff35491a5124af4439f
MD5 e38fd50fc009b6eacccc04af63435452
SHA1 1921a04066237adbbebcf3e3f1beb1e6c7fee15c
SHA512 d8a93cf65c2c4e481e2f64a6f695b5ea2cbfab5e6b3b9c84feb32d1c2227d7adf0e69e6fc3c7eb4759e684261768e9ddf149676633ee55136f7dc75d3c7d5c59
SSDEEP 3072:s+AgTrwgXX3x57Aw7OaS6oVNT/1Xgs1nJXlV02BZmwwdCbKS4:sMrzn8wlADnJXD02/7KS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9679

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW SetEndOfFile LocalCompact CreateHardLinkA GetModuleHandleW EnumResourceTypesA LoadLibraryW ReadConsoleInputA IsBadCodePtr CreateEventA GetACP GlobalUnlock GetLastError SetLastError GetProcAddress AttachConsole CreateJobSet LoadLibraryA FindResourceA AddAtomW GetModuleFileNameA EnumResourceNamesA GetFileTime ReleaseMutex GetDiskFreeSpaceExW TerminateJobObject GetWindowsDirectoryW CheckRemoteDebuggerPresent CloseHandle CreateFileW FlushFileBuffers GetStringTypeW LCMapStringW LocalAlloc CreateFileA WriteConsoleW SetStdHandle HeapAlloc ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapFree WriteFile GetStdHandle GetModuleFileNameW HeapCreate ReadFile EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapSize HeapReAlloc RaiseException

user32

GetMessageTime GetKeyboardLayout CharUpperBuffA SetCursorPos LoadMenuW GetCaretPos GetSysColorBrush GetSystemMetrics

advapi32

ClearEventLogW

ole32

CoUnmarshalHresult

Sharing

General

Malware Config

Signatures

File Explorer

7317f71a2df1b902823f48f98bf1e685e60a7819f1041ff35491a5124af4439f

kernel32

user32

advapi32

ole32

generic