c946da6e2f18315dd4208f1120c047e123f0f9eedcf1bee429e91ffe23a700c3

General

Target
c946da6e2f18315dd4208f1120c047e123f0f9eedcf1bee429e91ffe23a700c3
Size 1.2MB
Sample241109-3gl7msvbqc
SHA256 c946da6e2f18315dd4208f1120c047e123f0f9eedcf1bee429e91ffe23a700c3
MD5 b71dc3ea340d088b50b063cf85e9afa3
SHA1 effa595d0f0db36909b5d8823455d5589a3cc10a
SHA512 e84a0df225e8bbc8edadca3bebc715095370eb798a551795e1850eaafcde6befeb76c3011d3c7dd698e9970de3a6cf8b97af1832b83d50f960bc2aaecac2881c
SSDEEP 24576:4u0fRlKB2ZGPoUC1VqAUjfeEB7htX0yromAWB5HpS/gl:l0+BshUC1VzUjjPP0/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c946da6e2f18315dd4208f1120c047e123f0f9eedcf1bee429e91ffe23a700c3

File Explorer

c946da6e2f18315dd4208f1120c047e123f0f9eedcf1bee429e91ffe23a700c3

.exe 1.2MB

c946da6e2f18315dd4208f1120c047e123f0f9eedcf1bee429e91ffe23a700c3

IMPHASH cbb199b85bd7e99e36eb212e7f14e32a
SHA256 c946da6e2f18315dd4208f1120c047e123f0f9eedcf1bee429e91ffe23a700c3
MD5 b71dc3ea340d088b50b063cf85e9afa3
SHA1 effa595d0f0db36909b5d8823455d5589a3cc10a
SHA512 e84a0df225e8bbc8edadca3bebc715095370eb798a551795e1850eaafcde6befeb76c3011d3c7dd698e9970de3a6cf8b97af1832b83d50f960bc2aaecac2881c
SSDEEP 24576:4u0fRlKB2ZGPoUC1VqAUjfeEB7htX0yromAWB5HpS/gl:l0+BshUC1VzUjjPP0/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23751

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\guvanacopisem-puhalivadawid\maxawew.pdb

kernel32

FindResourceExW BackupSeek GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnlock GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA lstrlenA GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA AddAtomA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetCPInfoExA TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA HeapSize GetDateFormatW GetConsoleDisplayMode GetComputerNameA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

c946da6e2f18315dd4208f1120c047e123f0f9eedcf1bee429e91ffe23a700c3

kernel32

user32

gdi32

generic