36b524a7a3b444ebe042a71bcd6fab2a615371e036a8c6a3514e78dc2c9445f1

General

Target
36b524a7a3b444ebe042a71bcd6fab2a615371e036a8c6a3514e78dc2c9445f1
Size 399KB
Sample240905-wk1e4swfkr
SHA256 36b524a7a3b444ebe042a71bcd6fab2a615371e036a8c6a3514e78dc2c9445f1
MD5 05b66bfebe0f44b1eb15ede797adbecd
SHA1 6a9227f4cdc2cd60f594ccf4a265a39bea7bdeab
SHA512 1cae3a1419d42c0b131e475549731d4e37cb64e9e945451308bca32f1667ef4621ab8aeaf794f66b6a9e510c1368aa6fafdd52c6dd618e2afddaff043c877517
SSDEEP 6144:0Epz3ZfyHfWBmYALwRzU3EHHxdzJF0PwVFdgiR4i/OP3A:0Epz3ZfyHfWB7o3EHRdFFwEOc48
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b524a7a3b444ebe042a71bcd6fab2a615371e036a8c6a3514e78dc2c9445f1

File Explorer

36b524a7a3b444ebe042a71bcd6fab2a615371e036a8c6a3514e78dc2c9445f1

.exe 399KB

36b524a7a3b444ebe042a71bcd6fab2a615371e036a8c6a3514e78dc2c9445f1

IMPHASH 217ba609a66907c9a97999f413ed5449
SHA256 36b524a7a3b444ebe042a71bcd6fab2a615371e036a8c6a3514e78dc2c9445f1
MD5 05b66bfebe0f44b1eb15ede797adbecd
SHA1 6a9227f4cdc2cd60f594ccf4a265a39bea7bdeab
SHA512 1cae3a1419d42c0b131e475549731d4e37cb64e9e945451308bca32f1667ef4621ab8aeaf794f66b6a9e510c1368aa6fafdd52c6dd618e2afddaff043c877517
SSDEEP 6144:0Epz3ZfyHfWBmYALwRzU3EHHxdzJF0PwVFdgiR4i/OP3A:0Epz3ZfyHfWB7o3EHRdFFwEOc48
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

27825

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess SetDefaultCommConfigW SetEnvironmentVariableW CreateJobObjectW UnlockFile CreateHardLinkA GetModuleHandleW GetTickCount FindNextVolumeMountPointA GetNumberFormatA SetCommState GlobalAlloc SetFileShortNameW LoadLibraryW GetCalendarInfoA SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetFileAttributesW VerifyVersionInfoA GetModuleFileNameW CreateActCtxA GetThreadPriorityBoost LCMapStringA InterlockedExchange GetLogicalDriveStringsA SetLastError GetProcAddress CreateNamedPipeA GetConsoleDisplayMode GetProcessVersion InterlockedDecrement InterlockedExchangeAdd CreateFileMappingW CreateEventW OpenEventA GlobalWire EnumDateFormatsA EnumResourceNamesA VirtualProtect GetCurrentDirectoryA PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters GetDiskFreeSpaceExA ReadConsoleInputW DebugBreak GetTempPathA EnumCalendarInfoExA LocalFree TlsFree CommConfigDialogW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP EnumCalendarInfoW GetLocaleInfoA SetEndOfFile GetConsoleAliasExesA MultiByteToWideChar HeapAlloc GetLastError HeapReAlloc ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess HeapFree IsProcessorFeaturePresent WriteFile GetStdHandle HeapCreate ReadFile EnterCriticalSection LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep RaiseException SetStdHandle RtlUnwind HeapSize CreateFileW

user32

GetMenuStringW DrawStateA LoadMenuW CharUpperW GetSysColor GetCaretPos SetMenu

gdi32

CreateDCW GetBitmapBits GetCharWidthFloatA GetCharWidth32A

Sharing

General

Malware Config

Signatures

File Explorer

36b524a7a3b444ebe042a71bcd6fab2a615371e036a8c6a3514e78dc2c9445f1

kernel32

user32

gdi32

generic