772fd77eda5dc8a43af29a952a300f306fe93e534daf6e6bb88fe032334b7c88

Sharing

Copy URL Twitter E-mail

General

Target
772fd77eda5dc8a43af29a952a300f306fe93e534daf6e6bb88fe032334b7c88
Size 373KB
Sample241109-16cndssnd1
SHA256 772fd77eda5dc8a43af29a952a300f306fe93e534daf6e6bb88fe032334b7c88
MD5 579f14691451a6ecb4c90ca98e3730a9
SHA1 d1464ce39f2f3735728a4892cbd567092e56549b
SHA512 646c89367fbddd915df9aa9ca0d20408211f193b4f180a07973e2292f76ade9ab7bc09b6833b01c27332f1d8377d4a36d08c750c0c301db5762090514e913154
SSDEEP 6144:sQbYaHTyC3lD/ZQYHLcoO8xtTUXiNzUZBQKW:BbYaH2+NLU8xhciBc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772fd77eda5dc8a43af29a952a300f306fe93e534daf6e6bb88fe032334b7c88

File Explorer

772fd77eda5dc8a43af29a952a300f306fe93e534daf6e6bb88fe032334b7c88

.exe 373KB

772fd77eda5dc8a43af29a952a300f306fe93e534daf6e6bb88fe032334b7c88

IMPHASH dc39fcedf8b524fd19694abe76ce1ccb
SHA256 772fd77eda5dc8a43af29a952a300f306fe93e534daf6e6bb88fe032334b7c88
MD5 579f14691451a6ecb4c90ca98e3730a9
SHA1 d1464ce39f2f3735728a4892cbd567092e56549b
SHA512 646c89367fbddd915df9aa9ca0d20408211f193b4f180a07973e2292f76ade9ab7bc09b6833b01c27332f1d8377d4a36d08c750c0c301db5762090514e913154
SSDEEP 6144:sQbYaHTyC3lD/ZQYHLcoO8xtTUXiNzUZBQKW:BbYaH2+NLU8xhciBc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jen_da.pdb

kernel32

HeapFree AddConsoleAliasW LocalFlags GetProcessHeap ReadConsoleW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW LoadLibraryW FreeConsole SetVolumeMountPointA GetVersionExW lstrlenW ReplaceFileA ReleaseActCtx GetStdHandle SetLastError ReadConsoleA GetAtomNameA LoadLibraryA WriteConsoleA SetCalendarInfoW SetConsoleCtrlHandler SetEnvironmentVariableA GetModuleFileNameA GetDefaultCommConfigA FreeEnvironmentStringsW GetConsoleTitleW VirtualProtect CompareStringA GetCPInfoExA CloseHandle CreateFileA GetConsoleAliasesLengthW VirtualAlloc FindFirstChangeNotificationW WriteConsoleW GetConsoleOutputCP FlushFileBuffers SetStdHandle InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection SetFilePointer WriteFile FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

WindowFromPoint

advapi32

GetOldestEventLogRecord

ole32

CoRevokeMallocSpy

winhttp

WinHttpCloseHandle

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

772fd77eda5dc8a43af29a952a300f306fe93e534daf6e6bb88fe032334b7c88

kernel32

user32

advapi32

ole32

winhttp

msimg32

generic