76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3

General

Target
76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3
Size 327KB
Sample240725-vvhsdaxama
SHA256 76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3
MD5 e6db9b74f8f010ecb5efc6be90b47d46
SHA1 4f8a35f9df58e38e92492e75ee28eb748f1501b8
SHA512 25c8056d186f5b9090f2c2e4a4e33c503a36a0a63b9884967cb80d233a1f93d5794c246d4ba2bb3c7bc2bb296fab0897e755e41e61d8a591a42830616e2faf50
SSDEEP 3072:ph7mUmxKTmwPKeIjR930t4CfPrvXKIJiekdsCT1:XiUmxKTmNemR930LHTXDi7nT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3

File Explorer

76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3

.exe 327KB

76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3

IMPHASH 6170db845a7347035e264cc3f102fc84
SHA256 76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3
MD5 e6db9b74f8f010ecb5efc6be90b47d46
SHA1 4f8a35f9df58e38e92492e75ee28eb748f1501b8
SHA512 25c8056d186f5b9090f2c2e4a4e33c503a36a0a63b9884967cb80d233a1f93d5794c246d4ba2bb3c7bc2bb296fab0897e755e41e61d8a591a42830616e2faf50
SSDEEP 3072:ph7mUmxKTmwPKeIjR930t4CfPrvXKIJiekdsCT1:XiUmxKTmNemR930LHTXDi7nT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8124

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalCompact CreateHardLinkA GetModuleHandleW GetTickCount CreateNamedPipeW GetProcessHeap GetConsoleAliasesA GetConsoleCP GlobalAlloc GetSystemDirectoryW SetFileShortNameW LoadLibraryW IsProcessInJob FatalAppExitW AssignProcessToJobObject IsBadCodePtr GetModuleFileNameW CreateJobObjectA GetLastError GetProcAddress PeekConsoleInputW EnumDateFormatsExA SetEndOfFile LoadLibraryA FindFirstVolumeMountPointW SetConsoleCtrlHandler AddAtomW HeapWalk GlobalHandle EnumResourceTypesW SetEnvironmentVariableA GetOEMCP GetModuleHandleA EnumResourceNamesA GetFileTime SetProcessShutdownParameters GetDiskFreeSpaceExW LCMapStringW CloseHandle HeapSize GetStringTypeW WriteConsoleInputW VerLanguageNameW CreateFileA WriteConsoleW FlushFileBuffers HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess ReadFile MultiByteToWideChar ExitProcess SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetConsoleMode RtlUnwind GetCPInfo GetACP IsValidCodePage SetStdHandle IsProcessorFeaturePresent HeapReAlloc CreateFileW

user32

SetCaretPos CharUpperBuffW GetMessageExtraInfo GetMenu DrawStateW GetSysColorBrush

gdi32

GetCharWidthI GetCharABCWidthsI

winhttp

WinHttpOpen

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3

kernel32

user32

gdi32

winhttp

generic