d78e2298b58ac7444cdf109577755d1c3f78272eef877530eb5fbf85f65cc8d5

General

Target
d78e2298b58ac7444cdf109577755d1c3f78272eef877530eb5fbf85f65cc8d5
Size 606KB
Sample240825-nsv7cstgrp
SHA256 d78e2298b58ac7444cdf109577755d1c3f78272eef877530eb5fbf85f65cc8d5
MD5 19f43f583cebbe72ad0419b155054bc8
SHA1 8ac96d745062af6efce5e6a11ecd9fc761c54ba8
SHA512 4c4d4135384258e4b7273ecd7a0637ea68430651f54a13c978f6535b11356dfad7d49d354f7c56fca3813d1631ac11c93f627563a892f2ddee687ca0659144f5
SSDEEP 12288:VCB2F+bTtckcg/V6z5EoDLo//lmEItTgNCHzi/o:VCB28bTYg8dEuo//lHI1r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d78e2298b58ac7444cdf109577755d1c3f78272eef877530eb5fbf85f65cc8d5

File Explorer

d78e2298b58ac7444cdf109577755d1c3f78272eef877530eb5fbf85f65cc8d5

.exe 606KB

d78e2298b58ac7444cdf109577755d1c3f78272eef877530eb5fbf85f65cc8d5

IMPHASH a26339dff7dfc32ac46cb386c0841f9f
SHA256 d78e2298b58ac7444cdf109577755d1c3f78272eef877530eb5fbf85f65cc8d5
MD5 19f43f583cebbe72ad0419b155054bc8
SHA1 8ac96d745062af6efce5e6a11ecd9fc761c54ba8
SHA512 4c4d4135384258e4b7273ecd7a0637ea68430651f54a13c978f6535b11356dfad7d49d354f7c56fca3813d1631ac11c93f627563a892f2ddee687ca0659144f5
SSDEEP 12288:VCB2F+bTtckcg/V6z5EoDLo//lmEItTgNCHzi/o:VCB28bTYg8dEuo//lHI1r
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

25821

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA CommConfigDialogA GetConsoleAliasExesLengthA OpenJobObjectA GetLogicalDriveStringsW SetDefaultCommConfigW GetSystemWindowsDirectoryW SetEnvironmentVariableW CreateJobObjectW QueryDosDeviceA InterlockedCompareExchange SetVolumeMountPointW UnlockFile OpenSemaphoreA _lcreat GetTickCount GetNumberFormatA CreateActCtxW GlobalAlloc SetFileShortNameW LoadLibraryW LocalShrink GetCalendarInfoA CreateEventA SetConsoleCP HeapDestroy GetFileAttributesA VerifyVersionInfoA GetShortPathNameA GetLastError GetCurrentDirectoryW SetLastError GetProcAddress PeekConsoleInputW CreateNamedPipeA GlobalFree GetProcessVersion _hwrite SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd CreateFileMappingW CreateHardLinkW GetNumberFormatW SetConsoleWindowInfo GetModuleFileNameA EnumResourceNamesA VirtualProtect EnumDateFormatsW SetProcessShutdownParameters GetDiskFreeSpaceExA ReadConsoleInputW GetCurrentProcessId LCMapStringW HeapSize RtlUnwind GetStringTypeW RaiseException WideCharToMultiByte Sleep HeapAlloc MultiByteToWideChar HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW GetModuleHandleW ExitProcess DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapFree WriteFile GetStdHandle GetModuleFileNameW HeapCreate GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId IsProcessorFeaturePresent FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection

user32

ChangeMenuW GetKeyNameTextA LoadMenuA GetWindowTextLengthA GetDC LoadMenuW GetMenuState CharUpperW GetMenuStringA GetCaretPos GetCaretBlinkTime DdeQueryStringW

Sharing

General

Malware Config

Signatures

File Explorer

d78e2298b58ac7444cdf109577755d1c3f78272eef877530eb5fbf85f65cc8d5

kernel32

user32

generic