0ad417395aa118aed3d3b7a3a0185780c62defe77606f5c82f9f35189d0a8d2f

General

Target
0ad417395aa118aed3d3b7a3a0185780c62defe77606f5c82f9f35189d0a8d2f
Size 1.2MB
Sample241109-1m7pesskdx
SHA256 0ad417395aa118aed3d3b7a3a0185780c62defe77606f5c82f9f35189d0a8d2f
MD5 040da786631a25243976d24a86dc971f
SHA1 66cf699fa4d91c5117a15896a39252a865edf98c
SHA512 d59b969befeed95ccc0b56ad7ba6c0e6a6d895c4634f740438b16f035b2e27b90eb204b67a8efce9cb3cca76fefaad645d22b6a30692f15d4437526b82288b78
SSDEEP 24576:AJTQ1MCZCJyl7wU5zv38snXz/fbJufQkK/DmkzG66jWSZ2dAA7Ul26:AJWM1m775zv3VXDtIQgkzG6Lm2D7Ul2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ad417395aa118aed3d3b7a3a0185780c62defe77606f5c82f9f35189d0a8d2f

File Explorer

0ad417395aa118aed3d3b7a3a0185780c62defe77606f5c82f9f35189d0a8d2f

.exe 1.2MB

0ad417395aa118aed3d3b7a3a0185780c62defe77606f5c82f9f35189d0a8d2f

IMPHASH 2ba5a037cb06ff12cf2a6fa8a830314a
SHA256 0ad417395aa118aed3d3b7a3a0185780c62defe77606f5c82f9f35189d0a8d2f
MD5 040da786631a25243976d24a86dc971f
SHA1 66cf699fa4d91c5117a15896a39252a865edf98c
SHA512 d59b969befeed95ccc0b56ad7ba6c0e6a6d895c4634f740438b16f035b2e27b90eb204b67a8efce9cb3cca76fefaad645d22b6a30692f15d4437526b82288b78
SSDEEP 24576:AJTQ1MCZCJyl7wU5zv38snXz/fbJufQkK/DmkzG66jWSZ2dAA7Ul26:AJWM1m775zv3VXDtIQgkzG6Lm2D7Ul2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

42694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix CreateMutexW EnumCalendarInfoA RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW ZombifyActCtx QueryDosDeviceA GetNamedPipeHandleStateA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA SetCommState EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc SetFileShortNameW LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GetConsoleAliasW GetFileAttributesW GetBinaryTypeW FindNextVolumeMountPointW SetTapePosition EnumSystemLocalesA GetPrivateProfileIntW GetLastError GetProcAddress BeginUpdateResourceW CreateJobSet UnhandledExceptionFilter LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FindAtomA FoldStringA GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW GetCPInfoExA SetCalendarInfoA SetThreadAffinityMask TerminateJobObject MoveFileWithProgressW DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA WriteConsoleW FlushFileBuffers CreateFileW GetConsoleMode SetStdHandle WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary

user32

DefDlgProcA GetMenuBarInfo

shell32

DuplicateIcon

Sharing

General

Malware Config

Signatures

File Explorer

0ad417395aa118aed3d3b7a3a0185780c62defe77606f5c82f9f35189d0a8d2f

kernel32

user32

shell32

generic