d49dac6e830e32132ae56fa8c65afbf2c4e4bb59ad229313cdd8cfd5f0f32817

General

Target
d49dac6e830e32132ae56fa8c65afbf2c4e4bb59ad229313cdd8cfd5f0f32817
Size 179KB
Sample240722-pg46kaxble
SHA256 d49dac6e830e32132ae56fa8c65afbf2c4e4bb59ad229313cdd8cfd5f0f32817
MD5 b5b2f7f857590a907747549685f3ac36
SHA1 134a8e28c6b1024430f0dd89abe4d09d6b61f2e0
SHA512 bb6f20a273cd60ba6ca9cacf3aa9729837211606bf211b291098c1aebee9f38e900b206411b8cdaf176ed01d6d8429cecb47f922aedda2ec14387a0f219180fd
SSDEEP 3072:0b1rALHMKVSTl3SD4VPhEvvRNQne5m80cs2TwrB3ETBS:dLsKVSTl39VJNcDTSGS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d49dac6e830e32132ae56fa8c65afbf2c4e4bb59ad229313cdd8cfd5f0f32817

File Explorer

d49dac6e830e32132ae56fa8c65afbf2c4e4bb59ad229313cdd8cfd5f0f32817

.exe 179KB

d49dac6e830e32132ae56fa8c65afbf2c4e4bb59ad229313cdd8cfd5f0f32817

IMPHASH 8476d457b634f13fb056aaafe72c2253
SHA256 d49dac6e830e32132ae56fa8c65afbf2c4e4bb59ad229313cdd8cfd5f0f32817
MD5 b5b2f7f857590a907747549685f3ac36
SHA1 134a8e28c6b1024430f0dd89abe4d09d6b61f2e0
SHA512 bb6f20a273cd60ba6ca9cacf3aa9729837211606bf211b291098c1aebee9f38e900b206411b8cdaf176ed01d6d8429cecb47f922aedda2ec14387a0f219180fd
SSDEEP 3072:0b1rALHMKVSTl3SD4VPhEvvRNQne5m80cs2TwrB3ETBS:dLsKVSTl39VJNcDTSGS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5060

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA InterlockedDecrement ZombifyActCtx FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesA LoadLibraryW SetVolumeMountPointA WriteConsoleW GetAtomNameW SetUnhandledExceptionFilter GetProcAddress LoadLibraryA OpenWaitableTimerW LocalAlloc GetCommMask EnumDateFormatsA CreateWaitableTimerW lstrcatW FindFirstVolumeW AreFileApisANSI SetLastError GetNumaProcessorNode GetLastError HeapFree GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile HeapSize CreateFileA CloseHandle

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

d49dac6e830e32132ae56fa8c65afbf2c4e4bb59ad229313cdd8cfd5f0f32817

kernel32

advapi32

generic