55bbd315c6bf370a796751144191e8a2c0b5e1910f0273c61130186e5d4441abN

General

Target
55bbd315c6bf370a796751144191e8a2c0b5e1910f0273c61130186e5d4441abN
Size 346KB
Sample241109-agxn6askhs
SHA256 55bbd315c6bf370a796751144191e8a2c0b5e1910f0273c61130186e5d4441ab
MD5 53fabd260760bbeba5a54ff60a5d7020
SHA1 1f80a28addcfa544034905e3448f84e7da5afab1
SHA512 ef1a4283e2ae3b32bd0becfdfb091bd34e8be398302bb3881b70875ad97a43076fda318193d0ff90132a276dca5c2cb315d3ba652bd6d884ee514dc1311901ed
SSDEEP 3072:d2f1np7iJjbaG9kF00q8BpXNBbvXLG934q1yyklkRp/B6mDbxkc3feI5qFGW0rmV:Uf1npTAkG0q8fjXWJPHj5qFbqIUB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55bbd315c6bf370a796751144191e8a2c0b5e1910f0273c61130186e5d4441abN

File Explorer

55bbd315c6bf370a796751144191e8a2c0b5e1910f0273c61130186e5d4441abN

.exe 346KB

55bbd315c6bf370a796751144191e8a2c0b5e1910f0273c61130186e5d4441abN

IMPHASH bbae2892285e3cab8dc3fb0097667da6
SHA256 55bbd315c6bf370a796751144191e8a2c0b5e1910f0273c61130186e5d4441ab
MD5 53fabd260760bbeba5a54ff60a5d7020
SHA1 1f80a28addcfa544034905e3448f84e7da5afab1
SHA512 ef1a4283e2ae3b32bd0becfdfb091bd34e8be398302bb3881b70875ad97a43076fda318193d0ff90132a276dca5c2cb315d3ba652bd6d884ee514dc1311901ed
SSDEEP 3072:d2f1np7iJjbaG9kF00q8BpXNBbvXLG934q1yyklkRp/B6mDbxkc3feI5qFGW0rmV:Uf1npTAkG0q8fjXWJPHj5qFbqIUB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6378

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetNumaProcessorNode MoveFileExA GetConsoleAliasExesLengthA CallNamedPipeA InterlockedDecrement GetLogicalDriveStringsW GlobalSize SetDefaultCommConfigW GlobalLock GetModuleHandleW GetTickCount GlobalAlloc GetConsoleMode GetLocaleInfoW GetSystemWow64DirectoryW GetProcessHandleCount HeapCreate GetTimeFormatW GetConsoleAliasW SetConsoleCursorPosition GetFileAttributesW GetModuleFileNameW GetACP GetStartupInfoW GetStringTypeExA GetStdHandle ReadConsoleOutputCharacterA GetProcAddress MoveFileW VirtualAllocEx LoadLibraryA InterlockedExchangeAdd OpenWaitableTimerW SetCommMask FindAtomA SetNamedPipeHandleState OpenFileMappingW FreeEnvironmentStringsW BuildCommDCBA PurgeComm GetVersionExA LocalFileTimeToFileTime CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA MultiByteToWideChar HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetModuleFileNameA HeapSize FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP FlushFileBuffers SetStdHandle CreateFileA

ole32

CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

55bbd315c6bf370a796751144191e8a2c0b5e1910f0273c61130186e5d4441abN

kernel32

ole32

generic