2769c975677f6ddabca8b44ca2e68b79764354c7d4061424c5cb6cab7bb4e228N

General

Target
2769c975677f6ddabca8b44ca2e68b79764354c7d4061424c5cb6cab7bb4e228N
Size 90KB
Sample241102-v28blszpgt
SHA256 2769c975677f6ddabca8b44ca2e68b79764354c7d4061424c5cb6cab7bb4e228
MD5 968f1cb1d45f748fb488799229a59f50
SHA1 7de5be69381a47df94fa8bfe7337efabb85b984c
SHA512 680d505d008213d7564d8caa584f10a9a71ca652e46395ed2783c2974a3750e4405c5199227eb20cc5192cde8d67ceb41a692bbd0b8df2041b85f09adcdb0bfa
SSDEEP 768:xcTkkrwLA6lgJY23DP8WBosd0bHazf0Tye4pr2oBhi87Xtv+geMQQgMP:YPMZgUWyu0uZp2khTtv+o+MP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2769c975677f6ddabca8b44ca2e68b79764354c7d4061424c5cb6cab7bb4e228N

File Explorer

2769c975677f6ddabca8b44ca2e68b79764354c7d4061424c5cb6cab7bb4e228N

.exe 90KB

2769c975677f6ddabca8b44ca2e68b79764354c7d4061424c5cb6cab7bb4e228N

IMPHASH 0ab8af968841351a6340b418cb8a364d
SHA256 2769c975677f6ddabca8b44ca2e68b79764354c7d4061424c5cb6cab7bb4e228
MD5 968f1cb1d45f748fb488799229a59f50
SHA1 7de5be69381a47df94fa8bfe7337efabb85b984c
SHA512 680d505d008213d7564d8caa584f10a9a71ca652e46395ed2783c2974a3750e4405c5199227eb20cc5192cde8d67ceb41a692bbd0b8df2041b85f09adcdb0bfa
SSDEEP 768:xcTkkrwLA6lgJY23DP8WBosd0bHazf0Tye4pr2oBhi87Xtv+geMQQgMP:YPMZgUWyu0uZp2khTtv+o+MP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

RegisterClassExA TranslateMessage PostQuitMessage LoadIconA LoadCursorA GetMessageA DispatchMessageA DefWindowProcA SendMessageA CreateWindowExA CharLowerA

kernel32

lstrlenA lstrcpyA lstrcmpiA BeginUpdateResourceA CloseHandle CopyFileA CreateFileA CreateFileMappingA CreateThread DeleteFileA EndUpdateResourceA EnumResourceNamesA ExitProcess FindClose FindFirstFileA FindNextFileA FindResourceA FreeLibrary GetCommandLineA GetDriveTypeA GetEnvironmentVariableA GetFileAttributesA GetFileSize GetModuleFileNameA GetModuleHandleA GetShortPathNameA GetSystemDefaultLangID GetTickCount GetWindowsDirectoryA GlobalAlloc GlobalFree LoadLibraryA LoadResource LockResource MapViewOfFile MoveFileA ReadFile RtlMoveMemory SetEndOfFile SetFilePointer SizeofResource Sleep UnmapViewOfFile UpdateResourceA WinExec WriteFile lstrcatA lstrcmpA

shlwapi

PathFindExtensionA

urlmon

URLDownloadToFileA

advapi32

RegCreateKeyA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCloseKey

shell32

ShellExecuteA

dbghelp

MakeSureDirectoryPathExists

Sharing

General

Malware Config

Signatures

File Explorer

2769c975677f6ddabca8b44ca2e68b79764354c7d4061424c5cb6cab7bb4e228N

user32

kernel32

shlwapi

urlmon

advapi32

shell32

dbghelp

generic