64a45b42204cf4412dc2891368a4b72670642a008b13f3d99f6d3d42de95a842

General

Target
64a45b42204cf4412dc2891368a4b72670642a008b13f3d99f6d3d42de95a842
Size 297KB
Sample240809-qd4aja1ckj
SHA256 64a45b42204cf4412dc2891368a4b72670642a008b13f3d99f6d3d42de95a842
MD5 314558f9a6da39ffd12cba6c1064b3b8
SHA1 2c416cbfa8aeee687534b7c0888d411c0a837c59
SHA512 41fdd3cff2e4620c0dfc7adca6a985ba5af69c1e72be409ae8d206534e32e1d3d34358f3f90521f57969c3cdf391442f4dfeba2a174b3abcbe72257d36706947
SSDEEP 6144:ZUL4NWKzjkaphkIOe2q4EVSh/Bw/mhMgAB:ZUsNWK3bT4EneIB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64a45b42204cf4412dc2891368a4b72670642a008b13f3d99f6d3d42de95a842

File Explorer

64a45b42204cf4412dc2891368a4b72670642a008b13f3d99f6d3d42de95a842

.exe 297KB

64a45b42204cf4412dc2891368a4b72670642a008b13f3d99f6d3d42de95a842

IMPHASH a2c5fed2fe9465ce17d96af39c1b2514
SHA256 64a45b42204cf4412dc2891368a4b72670642a008b13f3d99f6d3d42de95a842
MD5 314558f9a6da39ffd12cba6c1064b3b8
SHA1 2c416cbfa8aeee687534b7c0888d411c0a837c59
SHA512 41fdd3cff2e4620c0dfc7adca6a985ba5af69c1e72be409ae8d206534e32e1d3d34358f3f90521f57969c3cdf391442f4dfeba2a174b3abcbe72257d36706947
SSDEEP 6144:ZUL4NWKzjkaphkIOe2q4EVSh/Bw/mhMgAB:ZUsNWK3bT4EneIB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceLanguagesA CompareStringW MultiByteToWideChar GetCPInfoExW GetLastError SetLastError GetProcAddress GlobalGetAtomNameA GlobalFree GlobalAlloc SetFileApisToOEM SetConsoleCtrlHandler AddAtomA GetModuleHandleA GetProcessShutdownParameters GetCPInfoExA SetProcessShutdownParameters CloseHandle GlobalReAlloc GetTickCount GetProcessVersion GetModuleHandleW CompareStringA GetTimeZoneInformation LCMapStringW LCMapStringA GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoW GetLocaleInfoA WideCharToMultiByte GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW SetEnvironmentVariableA

gdi32

AddFontResourceExW EndPath

msimg32

GradientFill AlphaBlend TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

64a45b42204cf4412dc2891368a4b72670642a008b13f3d99f6d3d42de95a842

kernel32

gdi32

msimg32

generic