b1680f17257af3c77a220fcf29ade51d0f02e9b429f687cc2d8a66f5a07e272b

General

Target
b1680f17257af3c77a220fcf29ade51d0f02e9b429f687cc2d8a66f5a07e272b
Size 243KB
Sample240720-klg5davbmp
SHA256 b1680f17257af3c77a220fcf29ade51d0f02e9b429f687cc2d8a66f5a07e272b
MD5 cd385c52e6ad2dd6a304839159534b7e
SHA1 f8f7360395dadb1e06024943c95739b1ac8678fa
SHA512 9227e5381a6dfc4856e5637820dbea55a7df07d4f8fbf8ee0e119e003ada3659fd063055cfeaca15e40e115add423abd9b4f28f92889b6608b5aec792e0b9eeb
SSDEEP 3072:X0tRmAsRYfI174Ofi0Q2SAMvDVNronnE+kQBwbCvhb9zWbqs5uxVCW:ERlfIXvQ2IDrktzB1Jb0qWkC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1680f17257af3c77a220fcf29ade51d0f02e9b429f687cc2d8a66f5a07e272b

File Explorer

b1680f17257af3c77a220fcf29ade51d0f02e9b429f687cc2d8a66f5a07e272b

.exe 243KB

b1680f17257af3c77a220fcf29ade51d0f02e9b429f687cc2d8a66f5a07e272b

IMPHASH cb30965266fdf6eae519dd45f888fcf1
SHA256 b1680f17257af3c77a220fcf29ade51d0f02e9b429f687cc2d8a66f5a07e272b
MD5 cd385c52e6ad2dd6a304839159534b7e
SHA1 f8f7360395dadb1e06024943c95739b1ac8678fa
SHA512 9227e5381a6dfc4856e5637820dbea55a7df07d4f8fbf8ee0e119e003ada3659fd063055cfeaca15e40e115add423abd9b4f28f92889b6608b5aec792e0b9eeb
SSDEEP 3072:X0tRmAsRYfI174Ofi0Q2SAMvDVNronnE+kQBwbCvhb9zWbqs5uxVCW:ERlfIXvQ2IDrktzB1Jb0qWkC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20261

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadHugeReadPtr SetEndOfFile LocalCompact CreateHardLinkA GetModuleHandleW GetCurrentThread GetProcessHeap EnumResourceTypesA GetConsoleCP GlobalAlloc LoadLibraryW IsProcessInJob AssignProcessToJobObject GetSystemDirectoryA GetLastError SetLastError GetProcAddress VerLanguageNameA FindClose LoadLibraryA SetConsoleCtrlHandler AddAtomW CreateEventW HeapWalk GlobalHandle SetEnvironmentVariableA GetModuleFileNameA GetOEMCP GlobalUnWire EnumResourceNamesA PeekConsoleInputA GetDiskFreeSpaceExW CreateFileW SetStdHandle WriteConsoleW SetFilePointer HeapReAlloc IsValidLocale EnumSystemLocalesA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent GetACP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess WriteFile GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetUserDefaultLCID GetLocaleInfoA CloseHandle

user32

GetMessageExtraInfo CharUpperBuffA DrawStateW SetMenu SetCaretPos GetCaretBlinkTime SetClipboardViewer

Sharing

General

Malware Config

Signatures

File Explorer

b1680f17257af3c77a220fcf29ade51d0f02e9b429f687cc2d8a66f5a07e272b

kernel32

user32

generic