154aad6fa244bbbf1b7d740a3553c66d2bc10735a18641abeda60162fc1fcdc0

General

Target
154aad6fa244bbbf1b7d740a3553c66d2bc10735a18641abeda60162fc1fcdc0
Size 367KB
Sample240718-2ff4kazdlm
SHA256 154aad6fa244bbbf1b7d740a3553c66d2bc10735a18641abeda60162fc1fcdc0
MD5 594d02362194ea0d57399327bbea5044
SHA1 7b61ed6de89af4971072504fa3d2a750395be054
SHA512 ca1aa68e2fd19cc5447d2621134b0e529182f189b2038c2d32a7c19ee1258200322603c769521cabf9a8401c6bef799c6bb36140187dcb0462441536676cc470
SSDEEP 3072:JTEOTTn0vMVaHzIVEX2sg3VktbQ0+NyxaWtls24E/ZX2CQvTH:JlTTn0vMcIVEX2sgoc0+k3ls27VDQvT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
154aad6fa244bbbf1b7d740a3553c66d2bc10735a18641abeda60162fc1fcdc0

File Explorer

154aad6fa244bbbf1b7d740a3553c66d2bc10735a18641abeda60162fc1fcdc0

.exe 367KB

154aad6fa244bbbf1b7d740a3553c66d2bc10735a18641abeda60162fc1fcdc0

IMPHASH dd3461dcf5778e48bd33236a57de1e0e
SHA256 154aad6fa244bbbf1b7d740a3553c66d2bc10735a18641abeda60162fc1fcdc0
MD5 594d02362194ea0d57399327bbea5044
SHA1 7b61ed6de89af4971072504fa3d2a750395be054
SHA512 ca1aa68e2fd19cc5447d2621134b0e529182f189b2038c2d32a7c19ee1258200322603c769521cabf9a8401c6bef799c6bb36140187dcb0462441536676cc470
SSDEEP 3072:JTEOTTn0vMVaHzIVEX2sg3VktbQ0+NyxaWtls24E/ZX2CQvTH:JlTTn0vMcIVEX2sgoc0+k3ls27VDQvT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9738

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCompact SetEndOfFile LocalCompact CreateHardLinkA LoadLibraryW ReadConsoleInputA IsBadCodePtr GetACP IsBadStringPtrA GlobalUnlock GetLastError SetLastError GetProcAddress AttachConsole CreateJobSet LoadLibraryA LocalAlloc AddAtomW CreateFileA HeapLock EnumResourceTypesW GetModuleFileNameA GetCurrentDirectoryA GetFileTime Module32NextW GetDiskFreeSpaceExW TerminateJobObject CheckRemoteDebuggerPresent CloseHandle CreateFileW FlushFileBuffers GetStringTypeW LCMapStringW WriteConsoleW CreateEventW EnumResourceNamesW SetStdHandle RaiseException HeapAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapFree WriteFile GetStdHandle GetModuleFileNameW HeapCreate ReadFile EnterCriticalSection LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapSize HeapReAlloc

user32

GetMessageTime GetKeyboardLayout CharUpperBuffA SetCursorPos LoadMenuW GetSysColorBrush GetSystemMetrics SetCaretPos

gdi32

GetCharWidthW

ole32

CoUnmarshalHresult

Sharing

General

Malware Config

Signatures

File Explorer

154aad6fa244bbbf1b7d740a3553c66d2bc10735a18641abeda60162fc1fcdc0

kernel32

user32

gdi32

ole32

generic