f50283cbf02cfa4b12898909b1c029a60aac6d7e65bacfc59b16bb46449ab4be

General

Target
f50283cbf02cfa4b12898909b1c029a60aac6d7e65bacfc59b16bb46449ab4be
Size 82KB
Sample240913-rdpmtatenc
SHA256 f50283cbf02cfa4b12898909b1c029a60aac6d7e65bacfc59b16bb46449ab4be
MD5 d5abe60678d585018957609706bf9928
SHA1 2594bf001fce3586a7c1f55d59cedf0b5de275e2
SHA512 88522736763786f1fba161e6ccf72aaeae7141553301428291a419c2ec071ab7bcb621be4ca2db4da9edf43d855a3b58bfa7e8193e2a4a4240635e19e66a1c22
SSDEEP 1536:qFAX9i0X7Xcwo2dzYTPEGhHv10kEKld+Z3EOS3KmF7sWscdb+QIscSEW:Li0X73vzGPEGhHi3EOgKmhb+QIscSEW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f50283cbf02cfa4b12898909b1c029a60aac6d7e65bacfc59b16bb46449ab4be

File Explorer

f50283cbf02cfa4b12898909b1c029a60aac6d7e65bacfc59b16bb46449ab4be

.dll 82KB

f50283cbf02cfa4b12898909b1c029a60aac6d7e65bacfc59b16bb46449ab4be

IMPHASH 880f061bc08a20e0bb8a3455d8981c5d
SHA256 f50283cbf02cfa4b12898909b1c029a60aac6d7e65bacfc59b16bb46449ab4be
MD5 d5abe60678d585018957609706bf9928
SHA1 2594bf001fce3586a7c1f55d59cedf0b5de275e2
SHA512 88522736763786f1fba161e6ccf72aaeae7141553301428291a419c2ec071ab7bcb621be4ca2db4da9edf43d855a3b58bfa7e8193e2a4a4240635e19e66a1c22
SSDEEP 1536:qFAX9i0X7Xcwo2dzYTPEGhHv10kEKld+Z3EOS3KmF7sWscdb+QIscSEW:Li0X73vzGPEGhHi3EOgKmhb+QIscSEW
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6831

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\work\SDK\HDR\source\bin\ImageCalibration.pdb

kernel32

TlsAlloc CreateFileW GetStringTypeW GetTickCount CloseHandle GetLastError InitializeCriticalSectionEx DecodePointer DeleteCriticalSection DeviceIoControl WaitForSingleObject CreateEventA SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers GetProcessHeap IsDebuggerPresent OutputDebugStringW RaiseException EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind InterlockedFlushSList SetLastError EncodePointer InitializeCriticalSectionAndSpinCount WriteConsoleW TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW QueryPerformanceFrequency ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc LCMapStringW GetStdHandle GetFileType HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW

Sharing

General

Malware Config

Signatures

File Explorer

f50283cbf02cfa4b12898909b1c029a60aac6d7e65bacfc59b16bb46449ab4be

kernel32

generic