7870920dc36498188131d778b31bd0f03c2c90bee5eb16c9066b72aad0ebb65a

General

Target
7870920dc36498188131d778b31bd0f03c2c90bee5eb16c9066b72aad0ebb65a
Size 364KB
Sample240715-m2hf7awanh
SHA256 7870920dc36498188131d778b31bd0f03c2c90bee5eb16c9066b72aad0ebb65a
MD5 9cc232a934d8d9fec804076286cc20fc
SHA1 9fd2e9981213bef11a185ccc7c4521b91a0776bb
SHA512 5fa9f7d494d9e6a6cd704ac611a19dcd4f6124b4437629ee6642f3b441c072d061837cbd5876c88ed1c91ac59acc10094c720815761d3e174e1ca4d5df09daa1
SSDEEP 3072:LGkTdUGNiBXznFLg8ipdlDMpWHpNwddq3rAy4qfd3yTMz:LRTd5NAXJLg8ipdlDwaNwIHR3yT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7870920dc36498188131d778b31bd0f03c2c90bee5eb16c9066b72aad0ebb65a

File Explorer

7870920dc36498188131d778b31bd0f03c2c90bee5eb16c9066b72aad0ebb65a

.exe 364KB

7870920dc36498188131d778b31bd0f03c2c90bee5eb16c9066b72aad0ebb65a

IMPHASH 694d481161f15a3a50297f304cce5a11
SHA256 7870920dc36498188131d778b31bd0f03c2c90bee5eb16c9066b72aad0ebb65a
MD5 9cc232a934d8d9fec804076286cc20fc
SHA1 9fd2e9981213bef11a185ccc7c4521b91a0776bb
SHA512 5fa9f7d494d9e6a6cd704ac611a19dcd4f6124b4437629ee6642f3b441c072d061837cbd5876c88ed1c91ac59acc10094c720815761d3e174e1ca4d5df09daa1
SSDEEP 3072:LGkTdUGNiBXznFLg8ipdlDMpWHpNwddq3rAy4qfd3yTMz:LRTd5NAXJLg8ipdlDwaNwIHR3yT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW HeapCompact SetEndOfFile LocalCompact CreateHardLinkA GlobalAlloc LoadLibraryW ReadConsoleInputA IsBadWritePtr IsBadStringPtrA GlobalUnlock GetLastError SetLastError GetProcAddress CreateJobSet LoadLibraryA SetConsoleCtrlHandler AddAtomW CreateEventW HeapLock EnumResourceTypesW GetModuleFileNameA GetOEMCP GetCurrentDirectoryA GetFileTime GetCurrentThreadId Module32NextW GetDiskFreeSpaceExW TerminateJobObject DebugBreak CreateFileW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode HeapAlloc GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW ExitProcess DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapFree WriteFile GetStdHandle GetModuleFileNameW HeapCreate ReadFile FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection Sleep MultiByteToWideChar SetFilePointer RtlUnwind GetCPInfo GetACP IsValidCodePage WideCharToMultiByte HeapSize HeapReAlloc SetStdHandle LCMapStringW GetStringTypeW GetConsoleCP RaiseException

user32

GetKeyboardLayout CharUpperBuffA SetCursorPos LoadMenuW GetSysColorBrush GetSystemMetrics SetCaretPos GetMessageTime

Sharing

General

Malware Config

Signatures

File Explorer

7870920dc36498188131d778b31bd0f03c2c90bee5eb16c9066b72aad0ebb65a

kernel32

user32

generic