279178436533262279c2e83d8e4af6ca0349dc49308659dc5a7c925c27dad34c

General

Target
279178436533262279c2e83d8e4af6ca0349dc49308659dc5a7c925c27dad34c
Size 791KB
Sample240721-2brphaxfqd
SHA256 279178436533262279c2e83d8e4af6ca0349dc49308659dc5a7c925c27dad34c
MD5 5e051e1484c6d5870684ace6cd03b6bb
SHA1 aa4530b63386a2d87634aa6e97e4751404caf6a6
SHA512 fca2b068fe2b3115aede9b5cfe71e85161b0c132017d67e5cda5c3f8a9640fe7aa7298e68cf5bb5faa42eb9da8e40fac9cb1ee8d645c0a8739554ee2589b87d3
SSDEEP 12288:P8aSLiij6i5pDZ+OgSsyyf9fdnwlOuDcpcEqJ/v4bBw0fmOAfgZzmI:kJiyp5pDIosyw+NcpcEqpw+ONZzt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
279178436533262279c2e83d8e4af6ca0349dc49308659dc5a7c925c27dad34c

File Explorer

279178436533262279c2e83d8e4af6ca0349dc49308659dc5a7c925c27dad34c

.exe 791KB

279178436533262279c2e83d8e4af6ca0349dc49308659dc5a7c925c27dad34c

IMPHASH 5d1d1715cbf91bfc76303e3901601105
SHA256 279178436533262279c2e83d8e4af6ca0349dc49308659dc5a7c925c27dad34c
MD5 5e051e1484c6d5870684ace6cd03b6bb
SHA1 aa4530b63386a2d87634aa6e97e4751404caf6a6
SHA512 fca2b068fe2b3115aede9b5cfe71e85161b0c132017d67e5cda5c3f8a9640fe7aa7298e68cf5bb5faa42eb9da8e40fac9cb1ee8d645c0a8739554ee2589b87d3
SSDEEP 12288:P8aSLiij6i5pDZ+OgSsyyf9fdnwlOuDcpcEqJ/v4bBw0fmOAfgZzmI:kJiyp5pDIosyw+NcpcEqpw+ONZzt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19459

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalCompact CreateHardLinkA GetModuleHandleW EnumResourceTypesA GetConsoleCP GlobalAlloc LoadLibraryW IsProcessInJob CreateEventA GetSystemDirectoryA GetLastError SetLastError GetProcAddress GetProcessHeaps VerLanguageNameA FindClose LoadLibraryA SetConsoleCtrlHandler AddAtomW SetEndOfFile GlobalHandle SetEnvironmentVariableA GlobalWire GetModuleFileNameA GetOEMCP GetModuleHandleA EnumResourceNamesA PeekConsoleInputA GetDiskFreeSpaceExA TerminateJobObject CloseHandle WriteConsoleW FlushFileBuffers SetStdHandle GetConsoleMode HeapReAlloc GetStringTypeW HeapWalk IsBadHugeReadPtr InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent GetACP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ReadFile ExitProcess SetFilePointer WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CreateFileW

user32

CharUpperBuffW GetMessageExtraInfo DrawStateW SetMenu GetSysColorBrush SetCaretPos SetClipboardViewer

advapi32

RegSetValueA

Sharing

General

Malware Config

Signatures

File Explorer

279178436533262279c2e83d8e4af6ca0349dc49308659dc5a7c925c27dad34c

kernel32

user32

advapi32

generic