ac65727aed8ba267531c9e5507e8989a61abd93e061976a9911129d69c3f0b19N

Sharing

Copy URL Twitter E-mail

General

Target
ac65727aed8ba267531c9e5507e8989a61abd93e061976a9911129d69c3f0b19N
Size 201KB
Sample241003-cbpgpsscpc
SHA256 ac65727aed8ba267531c9e5507e8989a61abd93e061976a9911129d69c3f0b19
MD5 cef5a143b6887e1b028736d0b42c9450
SHA1 3409948bd40c51d30eb764b30e1117bc0569628e
SHA512 9d3171d7e7c339954d03721a2892eb8baaae7d127a33bd7ee1443c65b93c629a255dfc5669ed8a420f1ba80d2763423b5f749c2526851e9b9ec6032aaad9daa8
SSDEEP 3072:+rBmh/F9sOxAm5T2C+IXo0UO4/Umo4afDmdly/fvwIK2l:+K/F9sr0CC+Itkj2fL/3fKQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac65727aed8ba267531c9e5507e8989a61abd93e061976a9911129d69c3f0b19N

File Explorer

ac65727aed8ba267531c9e5507e8989a61abd93e061976a9911129d69c3f0b19N

.exe 201KB

ac65727aed8ba267531c9e5507e8989a61abd93e061976a9911129d69c3f0b19N

IMPHASH e0b71f9836e9d955f820349cc5169ffe
SHA256 ac65727aed8ba267531c9e5507e8989a61abd93e061976a9911129d69c3f0b19
MD5 cef5a143b6887e1b028736d0b42c9450
SHA1 3409948bd40c51d30eb764b30e1117bc0569628e
SHA512 9d3171d7e7c339954d03721a2892eb8baaae7d127a33bd7ee1443c65b93c629a255dfc5669ed8a420f1ba80d2763423b5f749c2526851e9b9ec6032aaad9daa8
SSDEEP 3072:+rBmh/F9sOxAm5T2C+IXo0UO4/Umo4afDmdly/fvwIK2l:+K/F9sr0CC+Itkj2fL/3fKQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

36864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wmpenc.pdb

advapi32

RegDeleteKeyW RegDeleteValueW RegCloseKey RegCreateKeyExW RegOpenKeyExW RegSetValueExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW

kernel32

GetLastError SetPriorityClass GetCurrentProcess GetVersionExW VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery MultiByteToWideChar lstrlenW lstrcpyW InitializeCriticalSection DeleteCriticalSection InterlockedIncrement InterlockedDecrement lstrcmpiW HeapDestroy SetEvent CloseHandle WaitForSingleObject lstrcpynW GetModuleFileNameW FreeLibrary GetProcAddress LoadLibraryW CreateThread CreateEventW lstrcatW lstrlenA SizeofResource LoadResource FindResourceW LoadLibraryExW Sleep HeapSetInformation GetCurrentThreadId GetCommandLineW UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetModuleHandleA RtlUnwind GetStartupInfoW InterlockedCompareExchange InterlockedExchange SetUnhandledExceptionFilter

user32

DispatchMessageW CharPrevW PostThreadMessageW CharNextW GetMessageW

msvcrt

??2@YAPAXI@Z __wgetmainargs _cexit _exit _XcptFilter exit _wcmdln _initterm _amsg_exit __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp ??3@YAXPAX@Z memset _purecall memcpy realloc free malloc

ole32

CoInitialize CoUninitialize CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree CoRegisterClassObject CoRevokeClassObject CoCreateInstance

oleaut32

SysStringLen RegisterTypeLi LoadTypeLi SysAllocString SysFreeString VarUI4FromStr

Sharing

General

Malware Config

Signatures

File Explorer

ac65727aed8ba267531c9e5507e8989a61abd93e061976a9911129d69c3f0b19N

advapi32

kernel32

user32

msvcrt

ole32

oleaut32

generic