0fcd127ebda0d435dda364e977a26120N

General

Target
0fcd127ebda0d435dda364e977a26120N
Size 239KB
Sample240913-krlpravbkn
SHA256 63296be0fc8cedc36f814d05171e0cddf9186afa45ead6ec8632b7cbe4b06ccc
MD5 0fcd127ebda0d435dda364e977a26120
SHA1 37bbb15e2fe577db5023729e15924a61f30f63d7
SHA512 6afe29ec24c7e0ed32cb7515fd0db80bc63b0acdefa7cda0795636ac447792985e539986d932d3373e2ad765ae9edb47e1448b1d61806b116d75598b62b9f99c
SSDEEP 3072:4Sa80fS61LJhEirDAo8IQAmiT1norJz6d4kkCbFCWs/x+/Q:+fS61LJhEE5QA5iJa4E/Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fcd127ebda0d435dda364e977a26120N

File Explorer

0fcd127ebda0d435dda364e977a26120N

.exe 239KB

0fcd127ebda0d435dda364e977a26120N

IMPHASH ea146851e7496af845414d97ab90b17b
SHA256 63296be0fc8cedc36f814d05171e0cddf9186afa45ead6ec8632b7cbe4b06ccc
MD5 0fcd127ebda0d435dda364e977a26120
SHA1 37bbb15e2fe577db5023729e15924a61f30f63d7
SHA512 6afe29ec24c7e0ed32cb7515fd0db80bc63b0acdefa7cda0795636ac447792985e539986d932d3373e2ad765ae9edb47e1448b1d61806b116d75598b62b9f99c
SSDEEP 3072:4Sa80fS61LJhEirDAo8IQAmiT1norJz6d4kkCbFCWs/x+/Q:+fS61LJhEE5QA5iJa4E/Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetComputerNameA SearchPathW GetConsoleAliasesLengthW CopyFileExW GetNumaProcessorNode GetConsoleAliasExesLengthA WriteConsoleOutputW HeapAlloc InterlockedIncrement GlobalSize CreateDirectoryW GetSystemDefaultLCID CallNamedPipeW GetModuleHandleW GetCommandLineA GetSystemTimes GetEnvironmentStrings LoadLibraryW GetConsoleMode GetFileAttributesW GetBinaryTypeA WritePrivateProfileStringW InterlockedExchange GetStartupInfoA FillConsoleOutputCharacterW GetLastError GetProcAddress CopyFileA SetStdHandle EnterCriticalSection BuildCommDCBW OpenWaitableTimerA UnhandledExceptionFilter LocalAlloc QueryDosDeviceW VirtualLock FindAtomA FoldStringW GetModuleFileNameA GetDefaultCommConfigA SetConsoleTitleW ContinueDebugEvent FreeEnvironmentStringsW GetShortPathNameW SetCalendarInfoA SetFileAttributesW WriteConsoleW CloseHandle MultiByteToWideChar EncodePointer DecodePointer ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection Sleep HeapSize WriteFile GetModuleFileNameW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte LCMapStringW GetStringTypeW HeapFree RtlUnwind ReadFile HeapReAlloc IsProcessorFeaturePresent GetConsoleCP FlushFileBuffers SetFilePointer CreateFileW

user32

GetUserObjectInformationW

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

0fcd127ebda0d435dda364e977a26120N

kernel32

user32

generic