d3ad06a8a790a50f1d0a86072b7347d643e2d8559c12c5bd542fb226e13b4567

General

Target
d3ad06a8a790a50f1d0a86072b7347d643e2d8559c12c5bd542fb226e13b4567
Size 1.9MB
Sample241108-e7znnawcjm
SHA256 d3ad06a8a790a50f1d0a86072b7347d643e2d8559c12c5bd542fb226e13b4567
MD5 9b80757d2a67ad36e07adba2a25521ab
SHA1 796ae942e16a08fc93c6506a01f862dbb8b56af8
SHA512 22de633d13f11dc470951400d0ab20aa2ec2d6bd5a2b5f55f27c3552e73e1000183db3db76804ebce3fa3a54098f93c9855c40f214c3b794cf3a5b2ce1dc7754
SSDEEP 49152:yQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4Bsexqfn8+nFFQCxEsJwKQS:yfaNQh+NUABO/c0Y9AdFxqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3ad06a8a790a50f1d0a86072b7347d643e2d8559c12c5bd542fb226e13b4567

File Explorer

d3ad06a8a790a50f1d0a86072b7347d643e2d8559c12c5bd542fb226e13b4567

.dll 1.9MB

d3ad06a8a790a50f1d0a86072b7347d643e2d8559c12c5bd542fb226e13b4567

IMPHASH 26a05bd8ad034b9a52a9d61d0753a5ba
SHA256 d3ad06a8a790a50f1d0a86072b7347d643e2d8559c12c5bd542fb226e13b4567
MD5 9b80757d2a67ad36e07adba2a25521ab
SHA1 796ae942e16a08fc93c6506a01f862dbb8b56af8
SHA512 22de633d13f11dc470951400d0ab20aa2ec2d6bd5a2b5f55f27c3552e73e1000183db3db76804ebce3fa3a54098f93c9855c40f214c3b794cf3a5b2ce1dc7754
SSDEEP 49152:yQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4Bsexqfn8+nFFQCxEsJwKQS:yfaNQh+NUABO/c0Y9AdFxqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1395915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Safe\Share\Born\magnet\Thin.pdb

kernel32

QueryPerformanceCounter CreateFileW GetWindowsDirectoryW GetSystemTime GetModuleHandleW GetVersionExW OpenProcess GetDateFormatW SizeofResource LockResource LoadLibraryW ExitProcess GetFileTime WideCharToMultiByte GetModuleFileNameW TlsAlloc GetTempPathW VirtualProtect CreateSemaphoreW GetCurrentDirectoryW GetEnvironmentVariableW CompareStringW CompareStringA CreateFileA GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetTimeZoneInformation LoadLibraryA FreeLibrary SetConsoleCtrlHandler CloseHandle SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile HeapSize IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetOEMCP GetACP GetDateFormatA GetTimeFormatA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree GetCurrentThreadId GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetProcAddress GetModuleHandleA TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThread HeapDestroy HeapCreate VirtualFree FatalAppExitA VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableA

setupapi

SetupGetSourceInfoW SetupQuerySpaceRequiredOnDriveW SetupFreeSourceListW SetupInitDefaultQueueCallback SetupCreateDiskSpaceListW SetupSetSourceListW SetupGetIntField SetupDefaultQueueCallbackW SetupQueueDefaultCopyW SetupGetLineCountW SetupGetFieldCount SetupCancelTemporarySourceList SetupDestroyDiskSpaceList SetupQueryInfVersionInformationW SetupIterateCabinetW SetupPromptReboot SetupGetLineByIndexW SetupQuerySourceListW SetupQueryDrivesInDiskSpaceListW SetupQueueCopyW SetupQueueRenameW SetupRemoveFromSourceListW SetupSetPlatformPathOverrideW SetupAddToSourceListW SetupTermDefaultQueueCallback SetupGetTargetPathW SetupCopyOEMInfW SetupGetStringFieldW SetupGetLineTextW SetupRemoveFromDiskSpaceListW SetupPromptForDiskW

Sharing

General

Malware Config

Signatures

File Explorer

d3ad06a8a790a50f1d0a86072b7347d643e2d8559c12c5bd542fb226e13b4567

kernel32

setupapi

generic