861f1e2f832151ba384ff8c5669e21141be57d3b0ef46d05603dc4a594aab48a

General

Target
861f1e2f832151ba384ff8c5669e21141be57d3b0ef46d05603dc4a594aab48a
Size 1.0MB
Sample241109-3em16avaqq
SHA256 861f1e2f832151ba384ff8c5669e21141be57d3b0ef46d05603dc4a594aab48a
MD5 3ae842c709cb7e4079c0ebe53a7add0a
SHA1 3deb1b19caa3be4566d08ec2b009e9ad99818ddd
SHA512 9dbd6261fd7a4dfdc0fda048052cf6aa2137ac660f11059a32887cb552008cacc9868d44bb4965464d413ba0bbc3edda5d26984490178c01abab5f5db54b204c
SSDEEP 24576:yusZZe3gfRLVp2b8vnI0zGHHRBx6i7O7evx:yus+3gfRJUcnwH0i7aM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
861f1e2f832151ba384ff8c5669e21141be57d3b0ef46d05603dc4a594aab48a

File Explorer

861f1e2f832151ba384ff8c5669e21141be57d3b0ef46d05603dc4a594aab48a

.exe 1.0MB

861f1e2f832151ba384ff8c5669e21141be57d3b0ef46d05603dc4a594aab48a

IMPHASH 763e9e576ac4f8f5d8c94582bd0a0f4a
SHA256 861f1e2f832151ba384ff8c5669e21141be57d3b0ef46d05603dc4a594aab48a
MD5 3ae842c709cb7e4079c0ebe53a7add0a
SHA1 3deb1b19caa3be4566d08ec2b009e9ad99818ddd
SHA512 9dbd6261fd7a4dfdc0fda048052cf6aa2137ac660f11059a32887cb552008cacc9868d44bb4965464d413ba0bbc3edda5d26984490178c01abab5f5db54b204c
SSDEEP 24576:yusZZe3gfRLVp2b8vnI0zGHHRBx6i7O7evx:yus+3gfRJUcnwH0i7aM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15995

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFirmwareEnvironmentVariableW GetCPInfoExW CreateEventW CopyFileExA GetProcAddress GlobalAlloc SetDefaultCommConfigA OpenWaitableTimerW GetFileAttributesW EnumResourceTypesW WriteFileGather GetModuleHandleW InterlockedCompareExchange UnhandledExceptionFilter LocalFlags GlobalLock GetConsoleAliasW WritePrivateProfileSectionA GetCurrentThreadId SetLastError ReadConsoleInputW lstrcmpA SetCalendarInfoA GetSystemWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsW GetSystemDirectoryW AddAtomA GetExitCodeThread _llseek FindNextFileW CopyFileA GetShortPathNameW EnumCalendarInfoA EnumCalendarInfoExA CreateActCtxA FindFirstVolumeMountPointA PulseEvent SleepEx LoadLibraryA GetLastError HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleW SetStdHandle CreateFileW

user32

LoadMenuW DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

Sharing

General

Malware Config

Signatures

File Explorer

861f1e2f832151ba384ff8c5669e21141be57d3b0ef46d05603dc4a594aab48a

kernel32

user32

gdi32

advapi32

generic