8dfbc54cffed05a2b1f8442c233714d37fbd072a8c71f159cf9a1f6a8ca359e5N

General

Target
8dfbc54cffed05a2b1f8442c233714d37fbd072a8c71f159cf9a1f6a8ca359e5N
Size 370KB
Sample241109-2fewhasqby
SHA256 8dfbc54cffed05a2b1f8442c233714d37fbd072a8c71f159cf9a1f6a8ca359e5
MD5 3b0ff182c07cdbf3e59bb9f8c8c2ea80
SHA1 788f45a8a2bf81679a349c99b1c9e83256d8b487
SHA512 90b1c93a18112d20e2f0b9658451f228b42a2d54cc736708a83c93e5b81bec5c6d843bc226e075b4a60564c6efaa397a65de5b19b41c4140e827917f5a189baf
SSDEEP 6144:YZQI+pqoikfTHxW7tYmab2t0PRDpbfKMBphGaW:YZQI+YFkfTHT3TBfKMBpU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dfbc54cffed05a2b1f8442c233714d37fbd072a8c71f159cf9a1f6a8ca359e5N

File Explorer

8dfbc54cffed05a2b1f8442c233714d37fbd072a8c71f159cf9a1f6a8ca359e5N

.exe 370KB

8dfbc54cffed05a2b1f8442c233714d37fbd072a8c71f159cf9a1f6a8ca359e5N

IMPHASH 262ebebc1125c68c79c87bc329257c28
SHA256 8dfbc54cffed05a2b1f8442c233714d37fbd072a8c71f159cf9a1f6a8ca359e5
MD5 3b0ff182c07cdbf3e59bb9f8c8c2ea80
SHA1 788f45a8a2bf81679a349c99b1c9e83256d8b487
SHA512 90b1c93a18112d20e2f0b9658451f228b42a2d54cc736708a83c93e5b81bec5c6d843bc226e075b4a60564c6efaa397a65de5b19b41c4140e827917f5a189baf
SSDEEP 6144:YZQI+pqoikfTHxW7tYmab2t0PRDpbfKMBphGaW:YZQI+YFkfTHT3TBfKMBpU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CopyFileExW GetModuleHandleExA SetLocalTime BuildCommDCBAndTimeoutsA CallNamedPipeA SetUnhandledExceptionFilter WaitNamedPipeA GlobalSize GetEnvironmentStringsW InterlockedCompareExchange WriteConsoleInputA SetEvent BackupSeek GetModuleHandleW CreateRemoteThread SetFileTime GetWindowsDirectoryA GetDateFormatA FindActCtxSectionStringA GetDriveTypeA GlobalAlloc ReadFileScatter GetVersionExW DnsHostnameToComputerNameW GetComputerNameExA FindNextVolumeW GetConsoleAliasW GetFileAttributesW EnumCalendarInfoA GetSystemDirectoryA FindNextVolumeMountPointW DeactivateActCtx EnumSystemLocalesA GetConsoleOutputCP OpenMutexW GetProcAddress LoadLibraryA LocalAlloc SetCalendarInfoW RemoveDirectoryW GlobalGetAtomNameW GetCommMask RtlCaptureStackBackTrace GlobalFindAtomW EnumResourceTypesW FindNextFileA GetModuleHandleA SetLocaleInfoW EraseTape CreateMutexA GetStringTypeW RequestWakeupLatency GetVolumeNameForVolumeMountPointW DeleteFileW GetFileInformationByHandle CloseHandle HeapSize GetModuleFileNameW lstrcmpA GetLastError WideCharToMultiByte DeleteFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection HeapCreate HeapDestroy HeapFree HeapAlloc SetFilePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar FatalAppExitA Sleep IsProcessorFeaturePresent GetLocaleInfoW GetUserDefaultLCID GetLocaleInfoA IsValidLocale RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryW WriteConsoleW CreateFileW

user32

GetMenu

advapi32

ReportEventA

Sharing

General

Malware Config

Signatures

File Explorer

8dfbc54cffed05a2b1f8442c233714d37fbd072a8c71f159cf9a1f6a8ca359e5N

kernel32

user32

advapi32

generic