f16bf13cee65c92871b0d9b72238d9f5093229dcb007d7cc20c26fa861f495acN

General

Target
f16bf13cee65c92871b0d9b72238d9f5093229dcb007d7cc20c26fa861f495acN
Size 1.9MB
Sample241109-aeg6paskc1
SHA256 f16bf13cee65c92871b0d9b72238d9f5093229dcb007d7cc20c26fa861f495ac
MD5 07585b3392049f00cd18eaea539dd260
SHA1 ea86100add74ca61cd71154e676a55697ecf46d0
SHA512 b1be96d642efc11881ddd56fd3181ed954cafde867c8efefc819a425fb480ae81ea91c16547bcab3236b58965d3213c02c3666b2b90620d98856213a5db2c1c9
SSDEEP 49152:8QU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4Boe6qfn8+nFFQCxEsJwKQ3:8faNQh+NUABO/c0Y9Adt6qf8+gqJW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f16bf13cee65c92871b0d9b72238d9f5093229dcb007d7cc20c26fa861f495acN

File Explorer

f16bf13cee65c92871b0d9b72238d9f5093229dcb007d7cc20c26fa861f495acN

.dll 1.9MB

f16bf13cee65c92871b0d9b72238d9f5093229dcb007d7cc20c26fa861f495acN

IMPHASH fa26e90b751209baf7f71870da02cfde
SHA256 f16bf13cee65c92871b0d9b72238d9f5093229dcb007d7cc20c26fa861f495ac
MD5 07585b3392049f00cd18eaea539dd260
SHA1 ea86100add74ca61cd71154e676a55697ecf46d0
SHA512 b1be96d642efc11881ddd56fd3181ed954cafde867c8efefc819a425fb480ae81ea91c16547bcab3236b58965d3213c02c3666b2b90620d98856213a5db2c1c9
SSDEEP 49152:8QU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4Boe6qfn8+nFFQCxEsJwKQ3:8faNQh+NUABO/c0Y9Adt6qf8+gqJW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1395915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Safe\Share\Born\magnet\Thin.pdb

kernel32

QueryPerformanceCounter CreateFileW GetWindowsDirectoryW GetSystemTime GetModuleHandleW GetVersionExW OpenProcess GetDateFormatW SizeofResource LockResource LoadLibraryW ExitProcess GetFileTime WideCharToMultiByte GetModuleFileNameW TlsAlloc GetTempPathW VirtualProtect CreateSemaphoreW GetCurrentDirectoryW GetEnvironmentVariableW CompareStringW CompareStringA CreateFileA GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetTimeZoneInformation LoadLibraryA FreeLibrary SetConsoleCtrlHandler CloseHandle SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile HeapSize IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetOEMCP GetACP GetDateFormatA GetTimeFormatA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree GetCurrentThreadId GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetProcAddress GetModuleHandleA TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThread HeapDestroy HeapCreate VirtualFree FatalAppExitA VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableA

setupapi

SetupDefaultQueueCallbackW SetupCopyOEMInfW SetupGetStringFieldW SetupSetSourceListW SetupCancelTemporarySourceList SetupQueryInfVersionInformationW SetupTermDefaultQueueCallback SetupGetFieldCount SetupDestroyDiskSpaceList SetupGetTargetPathW SetupInitDefaultQueueCallback SetupRemoveFromDiskSpaceListW SetupGetLineCountW SetupAddToSourceListW SetupPromptForDiskW SetupQueueCopyW SetupGetSourceInfoW SetupQueueRenameW SetupFreeSourceListW SetupSetPlatformPathOverrideW SetupRemoveFromSourceListW SetupQuerySourceListW SetupPromptReboot SetupGetLineByIndexW SetupGetIntField SetupGetLineTextW SetupQueryDrivesInDiskSpaceListW SetupCreateDiskSpaceListW SetupQueueDefaultCopyW SetupQuerySpaceRequiredOnDriveW SetupIterateCabinetW

Sharing

General

Malware Config

Signatures

File Explorer

f16bf13cee65c92871b0d9b72238d9f5093229dcb007d7cc20c26fa861f495acN

kernel32

setupapi

generic