4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629

General

Target
4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629
Size 1.9MB
Sample241107-2hnw7asmbr
SHA256 4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629
MD5 a7369c2914d236bfe99a5b75b44cb189
SHA1 8b3016131e9d7181af3c0ea49552ecb78819264f
SHA512 ad593b7353df46de458bd1e32a2b791bcac4776701dca047180a278c5435fbb38d0b557a2eab16d64c2432ec9e903010115ab264c520293381abb0bc2544e4a4
SSDEEP 49152:BQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4BTeFqfn8+nFFQCxEsJwKQq:BfaNQh+NUABO/c0Y9AdQFqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629

File Explorer

4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629

.dll 1.9MB

4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629

IMPHASH bdb9aa6d74c00f41384ce27047f58c59
SHA256 4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629
MD5 a7369c2914d236bfe99a5b75b44cb189
SHA1 8b3016131e9d7181af3c0ea49552ecb78819264f
SHA512 ad593b7353df46de458bd1e32a2b791bcac4776701dca047180a278c5435fbb38d0b557a2eab16d64c2432ec9e903010115ab264c520293381abb0bc2544e4a4
SSDEEP 49152:BQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4BTeFqfn8+nFFQCxEsJwKQq:BfaNQh+NUABO/c0Y9AdQFqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1395915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Safe\Share\Born\magnet\Thin.pdb

kernel32

QueryPerformanceCounter CreateFileW GetWindowsDirectoryW GetSystemTime GetModuleHandleW GetVersionExW OpenProcess GetDateFormatW SizeofResource LockResource LoadLibraryW ExitProcess GetFileTime WideCharToMultiByte GetModuleFileNameW TlsAlloc GetTempPathW VirtualProtect CreateSemaphoreW GetCurrentDirectoryW GetEnvironmentVariableW CompareStringW CompareStringA CreateFileA GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetTimeZoneInformation LoadLibraryA FreeLibrary SetConsoleCtrlHandler CloseHandle SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile HeapSize IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetOEMCP GetACP GetDateFormatA GetTimeFormatA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree GetCurrentThreadId GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetProcAddress GetModuleHandleA TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThread HeapDestroy HeapCreate VirtualFree FatalAppExitA VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableA

setupapi

SetupCopyOEMInfW SetupSetSourceListW SetupGetLineByIndexW SetupGetStringFieldW SetupDefaultQueueCallbackW SetupCreateDiskSpaceListW SetupIterateCabinetW SetupQueryDrivesInDiskSpaceListW SetupQueueDefaultCopyW SetupGetLineCountW SetupFreeSourceListW SetupGetFieldCount SetupDestroyDiskSpaceList SetupCancelTemporarySourceList SetupTermDefaultQueueCallback SetupQuerySourceListW SetupQuerySpaceRequiredOnDriveW SetupSetPlatformPathOverrideW SetupAddToSourceListW SetupQueueRenameW SetupPromptReboot SetupQueueCopyW SetupRemoveFromSourceListW SetupRemoveFromDiskSpaceListW SetupPromptForDiskW SetupGetTargetPathW SetupQueryInfVersionInformationW SetupGetSourceInfoW SetupGetLineTextW SetupInitDefaultQueueCallback SetupGetIntField

Sharing

General

Malware Config

Signatures

File Explorer

4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629

kernel32

setupapi

generic