937eb23c0c68a34501be029aa11106e47cb2a3642de860a21dcc47983520e99cN

General

Target
937eb23c0c68a34501be029aa11106e47cb2a3642de860a21dcc47983520e99cN
Size 1023KB
Sample241015-rfa77sycnc
SHA256 937eb23c0c68a34501be029aa11106e47cb2a3642de860a21dcc47983520e99c
MD5 a0c8a9f05817ca74b5b289cf57fa4af0
SHA1 0d308c60ee35a6ff2d1bbe2cdeb35abc5b41701a
SHA512 4b6490661130b717c5ea603bcb4fd78d589a53086ca53839dc997c7226571beeafce2c9b9d3176310b359b36e143ffcdb217e64fefbcdcb5b51c319c8cdc2e33
SSDEEP 24576:TJjxI3sqXrdyl/FrZjhb5KUHxkNG+sU45g/3K5G:TxxI3sqXrdyDb5Kex+RXK5G
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
937eb23c0c68a34501be029aa11106e47cb2a3642de860a21dcc47983520e99cN

File Explorer

937eb23c0c68a34501be029aa11106e47cb2a3642de860a21dcc47983520e99cN

.exe 1023KB

937eb23c0c68a34501be029aa11106e47cb2a3642de860a21dcc47983520e99cN

IMPHASH 285f07c66f98861b92460fa57c11d967
SHA256 937eb23c0c68a34501be029aa11106e47cb2a3642de860a21dcc47983520e99c
MD5 a0c8a9f05817ca74b5b289cf57fa4af0
SHA1 0d308c60ee35a6ff2d1bbe2cdeb35abc5b41701a
SHA512 4b6490661130b717c5ea603bcb4fd78d589a53086ca53839dc997c7226571beeafce2c9b9d3176310b359b36e143ffcdb217e64fefbcdcb5b51c319c8cdc2e33
SSDEEP 24576:TJjxI3sqXrdyl/FrZjhb5KUHxkNG+sU45g/3K5G:TxxI3sqXrdyDb5Kex+RXK5G
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

192024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\if743890y8y3\Literally.pdb

kernel32

WaitForSingleObject CloseHandle CreateThread MultiByteToWideChar FormatMessageA GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LocalFree GetLocaleInfoEx LCMapStringEx CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetCurrentThread FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW SetConsoleCtrlHandler HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

937eb23c0c68a34501be029aa11106e47cb2a3642de860a21dcc47983520e99cN

kernel32

generic