392057d8e46f37454ea5fbbc334c36a0N[.]exe

General

Target
392057d8e46f37454ea5fbbc334c36a0N.exe
Size 1.6MB
Sample240905-vc3d3avflr
SHA256 fc78b313ddae5075bbcfd61bf34e7a67e62c67cd3fba75d3d13e1beb9c817f04
MD5 392057d8e46f37454ea5fbbc334c36a0
SHA1 0addf3674ce6916ff0c26b3f8bac5404073e1331
SHA512 59b34c118ffc191ebf7578420a463d7a215b4614e246330c38b899598084b7ea6c9e7c0f3221a08438f010a627d43acc059d0876278b0ee31a0893408f3dcf9f
SSDEEP 49152:EaqltwW/jlSQ9T235RQ0vgBj+yxKVgzQqFJbxI:EflD/jlSQMY9xK61FJVI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
392057d8e46f37454ea5fbbc334c36a0N.exe

File Explorer

392057d8e46f37454ea5fbbc334c36a0N.exe

.exe 1.6MB

392057d8e46f37454ea5fbbc334c36a0N.exe

IMPHASH cf0d2de4fd6406302012e0f40060395f
SHA256 fc78b313ddae5075bbcfd61bf34e7a67e62c67cd3fba75d3d13e1beb9c817f04
MD5 392057d8e46f37454ea5fbbc334c36a0
SHA1 0addf3674ce6916ff0c26b3f8bac5404073e1331
SHA512 59b34c118ffc191ebf7578420a463d7a215b4614e246330c38b899598084b7ea6c9e7c0f3221a08438f010a627d43acc059d0876278b0ee31a0893408f3dcf9f
SSDEEP 49152:EaqltwW/jlSQ9T235RQ0vgBj+yxKVgzQqFJbxI:EflD/jlSQMY9xK61FJVI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

29604

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CoCreateInstance CoInitialize

user32

PeekMessageW ExitWindowsEx GetDlgItemTextW SetWindowTextW ShowWindow MessageBoxW CreateDialogParamW LoadIconW SendMessageW GetMessageW EnableWindow GetDlgItem IsDialogMessageW TranslateMessage DispatchMessageW SetDlgItemTextW DestroyWindow

advapi32

RegSetValueExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW RegOpenKeyExW RegCloseKey RegCreateKeyExW

shell32

SHGetFolderPathW SHBrowseForFolderW SHGetPathFromIDListW

msvcrt

_exit _XcptFilter _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp memcpy memcmp memmove malloc free exit memset

kernel32

ReadFile CloseHandle CreateFileW FormatMessageW WriteFile DeleteFileW CreateDirectoryW GetSystemDirectoryW LoadLibraryW GetModuleFileNameW GetFileAttributesW SetFilePointer GetVersion LoadLibraryExW GetModuleHandleA GetStartupInfoA LocalFree SetFileAttributesW SetFileTime MoveFileExW GetLastError lstrcatW GetCommandLineW lstrcpyW GetModuleHandleW GetProcAddress GetCurrentProcess lstrlenW

Sharing