471da4679c8d3819c355fdcd7c834a0318699494972a78c5c48f791a960949c8

General

Target
471da4679c8d3819c355fdcd7c834a0318699494972a78c5c48f791a960949c8
Size 480KB
Sample240725-2j1blssdla
SHA256 471da4679c8d3819c355fdcd7c834a0318699494972a78c5c48f791a960949c8
MD5 46ed2f5409a89bb45f8d7b90bd4b3ee8
SHA1 639ceddb42c3fe622d0f5aed2a2c65f69a82cd15
SHA512 34d4e53510fd0aa57aa65dfd55176ef993827d558d8e6eb83d1a529768a77bed85fbb853218e628de42839230293cbecdb3f7318c1cad8f34c7b3d44b9f9b759
SSDEEP 12288:RIpJF7eiaVNiZsPRVMyUy7ToOSahZcZNdwU5W:G2nNXRV8y7lZc6UA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
471da4679c8d3819c355fdcd7c834a0318699494972a78c5c48f791a960949c8

File Explorer

471da4679c8d3819c355fdcd7c834a0318699494972a78c5c48f791a960949c8

.exe 480KB

471da4679c8d3819c355fdcd7c834a0318699494972a78c5c48f791a960949c8

IMPHASH 42eb2b50acad70f9618962bfa70c7f34
SHA256 471da4679c8d3819c355fdcd7c834a0318699494972a78c5c48f791a960949c8
MD5 46ed2f5409a89bb45f8d7b90bd4b3ee8
SHA1 639ceddb42c3fe622d0f5aed2a2c65f69a82cd15
SHA512 34d4e53510fd0aa57aa65dfd55176ef993827d558d8e6eb83d1a529768a77bed85fbb853218e628de42839230293cbecdb3f7318c1cad8f34c7b3d44b9f9b759
SSDEEP 12288:RIpJF7eiaVNiZsPRVMyUy7ToOSahZcZNdwU5W:G2nNXRV8y7lZc6UA
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

35531

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

OffsetRect

kernel32

GetCPInfo CreateFileW WaitForSingleObject CreateThread VirtualAllocEx FreeConsole RaiseException InitOnceBeginInitialize InitOnceComplete CloseHandle GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW WriteConsoleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead HeapSize RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle

Sharing

General

Malware Config

Signatures

File Explorer

471da4679c8d3819c355fdcd7c834a0318699494972a78c5c48f791a960949c8

user32

kernel32

generic