d78754994d0880eb8e0e9215468fa08cb5e6d633395d3343fff9abb70299d395

General

Target
d78754994d0880eb8e0e9215468fa08cb5e6d633395d3343fff9abb70299d395
Size 1.2MB
Sample241109-1kx27sshqj
SHA256 d78754994d0880eb8e0e9215468fa08cb5e6d633395d3343fff9abb70299d395
MD5 a425f1b9fc5619ff825200d62a8c5725
SHA1 f5f514c15ba6022fa49b0b162f090376448950d4
SHA512 632973088cf59568760de8847f7818038ac5ff0c22942d6c090048197f95d79be7dd2405b6b57029a54a4f80e9f3569283d4f6a9ad1aeffb4a46b4c19cbf366e
SSDEEP 24576:rYAVCfN05jEKvD1eqB6QLUIHZinS07gPUSko5622+s:rY1NsVN654ZiE1ko5Q+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d78754994d0880eb8e0e9215468fa08cb5e6d633395d3343fff9abb70299d395

File Explorer

d78754994d0880eb8e0e9215468fa08cb5e6d633395d3343fff9abb70299d395

.exe 1.2MB

d78754994d0880eb8e0e9215468fa08cb5e6d633395d3343fff9abb70299d395

IMPHASH 6a8dd0359e3425dd330b8f8519bc89c8
SHA256 d78754994d0880eb8e0e9215468fa08cb5e6d633395d3343fff9abb70299d395
MD5 a425f1b9fc5619ff825200d62a8c5725
SHA1 f5f514c15ba6022fa49b0b162f090376448950d4
SHA512 632973088cf59568760de8847f7818038ac5ff0c22942d6c090048197f95d79be7dd2405b6b57029a54a4f80e9f3569283d4f6a9ad1aeffb4a46b4c19cbf366e
SSDEEP 24576:rYAVCfN05jEKvD1eqB6QLUIHZinS07gPUSko5622+s:rY1NsVN654ZiE1ko5Q+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

42995

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW QueryDosDeviceA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA SetCommState EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc LoadLibraryW IsProcessInJob GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GetConsoleAliasW GetFileAttributesW FindNextVolumeMountPointW SetTapePosition GetNamedPipeHandleStateW EnumSystemLocalesA EnumCalendarInfoA GetLastError GetProcAddress BeginUpdateResourceW CreateJobSet UnhandledExceptionFilter BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FindAtomA FoldStringA GetModuleFileNameA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask SetFileShortNameA GetConsoleProcessList DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA WriteConsoleW FlushFileBuffers GetConsoleMode GetPrivateProfileIntW GlobalFix SetStdHandle CreateFileW WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary

user32

DefDlgProcA GetMenuBarInfo

advapi32

ReadEventLogW

shell32

DuplicateIcon

Sharing

General

Malware Config

Signatures

File Explorer

d78754994d0880eb8e0e9215468fa08cb5e6d633395d3343fff9abb70299d395

kernel32

user32

advapi32

shell32

generic