1754a9f25a91445e79e4859cf73b0f4d42dbe9b4c6a8a4702e531629c08bbfbc

General

Target
1754a9f25a91445e79e4859cf73b0f4d42dbe9b4c6a8a4702e531629c08bbfbc
Size 163KB
Sample240716-ppln7avgrc
SHA256 1754a9f25a91445e79e4859cf73b0f4d42dbe9b4c6a8a4702e531629c08bbfbc
MD5 7416f81e3d1d7b74d13a7802cbc92b7a
SHA1 d91134a41a5d813e8b339faa3b88b7821ea10029
SHA512 66a83cc54f8e6a4701923b49faa17e939f5ad980c9166b2f83c7d77df2370b6da12e3e79af548311746fc5a4601fe592c262c1824983b3931ad7ffe5da8a74b7
SSDEEP 3072:P308L+GX7cR5uYEWAbMlzMeiO5RsvPGtq1:c8L+GX7isWoMlzMewvu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1754a9f25a91445e79e4859cf73b0f4d42dbe9b4c6a8a4702e531629c08bbfbc

File Explorer

1754a9f25a91445e79e4859cf73b0f4d42dbe9b4c6a8a4702e531629c08bbfbc

.exe 163KB

1754a9f25a91445e79e4859cf73b0f4d42dbe9b4c6a8a4702e531629c08bbfbc

IMPHASH 577cbe757b347b671ef5051698a43c54
SHA256 1754a9f25a91445e79e4859cf73b0f4d42dbe9b4c6a8a4702e531629c08bbfbc
MD5 7416f81e3d1d7b74d13a7802cbc92b7a
SHA1 d91134a41a5d813e8b339faa3b88b7821ea10029
SHA512 66a83cc54f8e6a4701923b49faa17e939f5ad980c9166b2f83c7d77df2370b6da12e3e79af548311746fc5a4601fe592c262c1824983b3931ad7ffe5da8a74b7
SSDEEP 3072:P308L+GX7cR5uYEWAbMlzMeiO5RsvPGtq1:c8L+GX7isWoMlzMewvu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6045

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx GetCommProperties GetModuleHandleW GetConsoleAliasesA GlobalAlloc LoadLibraryW Sleep SetVolumeMountPointA WriteConsoleW GetAtomNameW WritePrivateProfileStringW GetShortPathNameA CreateJobObjectA InterlockedExchange SetLastError GetProcAddress BuildCommDCBW LoadLibraryA UnhandledExceptionFilter AddAtomA OpenJobObjectW FoldStringA EnumDateFormatsA lstrcatW FindFirstVolumeW AreFileApisANSI FlushFileBuffers CloseHandle CreateFileA GetLastError HeapFree MultiByteToWideChar HeapReAlloc HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP HeapSize

user32

GetProcessDefaultLayout

ole32

CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

1754a9f25a91445e79e4859cf73b0f4d42dbe9b4c6a8a4702e531629c08bbfbc

kernel32

user32

ole32

generic