a236e6cd7b4d7ac60315928a1a8e0b255cf55077eb90d25596e49fd80da2f07a

General

Target
a236e6cd7b4d7ac60315928a1a8e0b255cf55077eb90d25596e49fd80da2f07a
Size 1.2MB
Sample241109-grd35aykfs
SHA256 a236e6cd7b4d7ac60315928a1a8e0b255cf55077eb90d25596e49fd80da2f07a
MD5 2ac5033cb214e7b3b222f2260a590530
SHA1 c6f90245dd40745784e3b3ff748731aa0120976b
SHA512 4761d6f4b42c4c405d2b002096aaa87b7220bf71bcc4799b74bd1a12a9e1a7ff1481cee91587d9eb2b3538a3e625bad8718ecbc3b6a64d18bd94735c1f64b559
SSDEEP 24576:YJTQ1MCZCJyl7wU5zv38snXz/fbJufQkK/DmkzG66jWSZ2dAA7Ul26:YJWM1m775zv3VXDtIQgkzG6Lm2D7Ul2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a236e6cd7b4d7ac60315928a1a8e0b255cf55077eb90d25596e49fd80da2f07a

File Explorer

a236e6cd7b4d7ac60315928a1a8e0b255cf55077eb90d25596e49fd80da2f07a

.exe 1.2MB

a236e6cd7b4d7ac60315928a1a8e0b255cf55077eb90d25596e49fd80da2f07a

IMPHASH 2ba5a037cb06ff12cf2a6fa8a830314a
SHA256 a236e6cd7b4d7ac60315928a1a8e0b255cf55077eb90d25596e49fd80da2f07a
MD5 2ac5033cb214e7b3b222f2260a590530
SHA1 c6f90245dd40745784e3b3ff748731aa0120976b
SHA512 4761d6f4b42c4c405d2b002096aaa87b7220bf71bcc4799b74bd1a12a9e1a7ff1481cee91587d9eb2b3538a3e625bad8718ecbc3b6a64d18bd94735c1f64b559
SSDEEP 24576:YJTQ1MCZCJyl7wU5zv38snXz/fbJufQkK/DmkzG66jWSZ2dAA7Ul26:YJWM1m775zv3VXDtIQgkzG6Lm2D7Ul2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

42694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix CreateMutexW EnumCalendarInfoA RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW ZombifyActCtx QueryDosDeviceA GetNamedPipeHandleStateA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA SetCommState EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc SetFileShortNameW LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GetConsoleAliasW GetFileAttributesW GetBinaryTypeW FindNextVolumeMountPointW SetTapePosition EnumSystemLocalesA GetPrivateProfileIntW GetLastError GetProcAddress BeginUpdateResourceW CreateJobSet UnhandledExceptionFilter LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FindAtomA FoldStringA GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW GetCPInfoExA SetCalendarInfoA SetThreadAffinityMask TerminateJobObject MoveFileWithProgressW DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA WriteConsoleW FlushFileBuffers CreateFileW GetConsoleMode SetStdHandle WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary

user32

DefDlgProcA GetMenuBarInfo

shell32

DuplicateIcon

Sharing

General

Malware Config

Signatures

File Explorer

a236e6cd7b4d7ac60315928a1a8e0b255cf55077eb90d25596e49fd80da2f07a

kernel32

user32

shell32

generic