8a04951a8c70c63987bd25e462a98e589e36a2c8f5ce2816f9e5a0906687f031

Sharing

Copy URL Twitter E-mail

General

Target
8a04951a8c70c63987bd25e462a98e589e36a2c8f5ce2816f9e5a0906687f031
Size 446KB
Sample240926-2pacdasalk
SHA256 8a04951a8c70c63987bd25e462a98e589e36a2c8f5ce2816f9e5a0906687f031
MD5 bf87a376305099cac2ea13ff482ba319
SHA1 8215ee2aed65897764ce557e4472092c6fb76636
SHA512 59bf9b99b3cb6e30749cdb66e93c42481a61b6a6ea7e21ac6a52e6701aabb55faf169dcc87c21eed1dafcaa72c09df38f64d2a1c7545207fd49409cde02bd8ff
SSDEEP 6144:coZe1DyEeam8WeaxWQnNpfpFkBSGKh9PXKyo9lDGLDlq5FXCnFk:cowByEeam8KxWUv0Srh9qQLRMSC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a04951a8c70c63987bd25e462a98e589e36a2c8f5ce2816f9e5a0906687f031

File Explorer

8a04951a8c70c63987bd25e462a98e589e36a2c8f5ce2816f9e5a0906687f031

.exe 446KB

8a04951a8c70c63987bd25e462a98e589e36a2c8f5ce2816f9e5a0906687f031

IMPHASH de80f36f2a6fc0a853a31d1d9771ee6a
SHA256 8a04951a8c70c63987bd25e462a98e589e36a2c8f5ce2816f9e5a0906687f031
MD5 bf87a376305099cac2ea13ff482ba319
SHA1 8215ee2aed65897764ce557e4472092c6fb76636
SHA512 59bf9b99b3cb6e30749cdb66e93c42481a61b6a6ea7e21ac6a52e6701aabb55faf169dcc87c21eed1dafcaa72c09df38f64d2a1c7545207fd49409cde02bd8ff
SSDEEP 6144:coZe1DyEeam8WeaxWQnNpfpFkBSGKh9PXKyo9lDGLDlq5FXCnFk:cowByEeam8KxWUv0Srh9qQLRMSC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27181

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState InterlockedDecrement GetCurrentProcess InterlockedCompareExchange SetVolumeMountPointW CreateHardLinkA GetModuleHandleW CreateNamedPipeW EnumCalendarInfoExW GetNumberFormatA CreateActCtxW TlsSetValue LoadLibraryW GetLocaleInfoW GetCalendarInfoA CreateEventA GetFileAttributesA GetTimeFormatW GetModuleFileNameW FindNextVolumeMountPointW GetTempPathW GetShortPathNameA CreateJobObjectA VerifyVersionInfoW InterlockedExchange GlobalUnfix GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW GetProcAddress GetLongPathNameA PeekConsoleInputW EnumSystemCodePagesW GetConsoleDisplayMode InterlockedIncrement LoadModule GetProcessVersion SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd CreateFileMappingA LocalAlloc GetFileType FoldStringW SetEnvironmentVariableA EnumDateFormatsA GetProcessShutdownParameters LoadLibraryExA GetFileTime WaitForDebugEvent OpenEventW SetFileShortNameA GetVersionExA GetDiskFreeSpaceExW GetWindowsDirectoryW LocalFree LCMapStringW CommConfigDialogW CloseHandle GetStringTypeW MultiByteToWideChar CreateFileW WriteConsoleW RaiseException GetConsoleAliasExesLengthA SetEndOfFile GetConsoleAliasExesA EnumCalendarInfoA GlobalMemoryStatus SetComputerNameA SetDefaultCommConfigA HeapSize FlushFileBuffers SetStdHandle IsValidCodePage HeapAlloc HeapReAlloc ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess WriteFile HeapCreate HeapFree SetFilePointer TlsAlloc TlsGetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP

user32

SetCaretPos GetMenuStringA LoadMenuA InsertMenuItemW GetMenu DrawStateA GetWindowLongW GetSysColor CharUpperA

gdi32

GetBkMode GetCharWidthFloatA CreateDCA GetCharWidth32W GetTextCharset GetCharWidthI

winhttp

WinHttpConnect

msimg32

GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

8a04951a8c70c63987bd25e462a98e589e36a2c8f5ce2816f9e5a0906687f031

kernel32

user32

gdi32

winhttp

msimg32

generic