eaa7becc44c26c1d802981d439fc436c34cbd399a891886c5c65fcc21d7372b7

General

Target
eaa7becc44c26c1d802981d439fc436c34cbd399a891886c5c65fcc21d7372b7
Size 574KB
Sample241109-mbcs1sserp
SHA256 eaa7becc44c26c1d802981d439fc436c34cbd399a891886c5c65fcc21d7372b7
MD5 3fd5276276602c7496ed60da28212145
SHA1 8bd2afa282a3c9f904792526a9b65b9976cd9357
SHA512 eba7e2022d453d3e89503a6c108474aae0f7ce8b9992033b07a7277fdd47352013fbc474cfc3981814b606264fd839be5432e16666a8b3d67295c66899ec395d
SSDEEP 12288:JlvTqsKami8mOB+C+uiDum8SPl/O+50NzXTKbx7SK:Jlbqbi8d+P1KjSN/z50dDKbx7L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaa7becc44c26c1d802981d439fc436c34cbd399a891886c5c65fcc21d7372b7

File Explorer

eaa7becc44c26c1d802981d439fc436c34cbd399a891886c5c65fcc21d7372b7

.exe 574KB

eaa7becc44c26c1d802981d439fc436c34cbd399a891886c5c65fcc21d7372b7

IMPHASH 8e1291b1baddb8fcca0899ad3cc587e8
SHA256 eaa7becc44c26c1d802981d439fc436c34cbd399a891886c5c65fcc21d7372b7
MD5 3fd5276276602c7496ed60da28212145
SHA1 8bd2afa282a3c9f904792526a9b65b9976cd9357
SHA512 eba7e2022d453d3e89503a6c108474aae0f7ce8b9992033b07a7277fdd47352013fbc474cfc3981814b606264fd839be5432e16666a8b3d67295c66899ec395d
SSDEEP 12288:JlvTqsKami8mOB+C+uiDum8SPl/O+50NzXTKbx7SK:Jlbqbi8d+P1KjSN/z50dDKbx7L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

34296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetDriveTypeW GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA EnumCalendarInfoW GetCommState InterlockedDecrement GetNamedPipeHandleStateA GetModuleHandleW GetTickCount SetProcessPriorityBoost GetEnvironmentStrings LoadLibraryW InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetFileAttributesW lstrcatA GetOverlappedResult GetVolumePathNameA FindNextVolumeMountPointW SetTapePosition GetStringTypeExA EnumSystemLocalesA GetPrivateProfileIntW GlobalUnfix ReleaseActCtx GetStdHandle GetLastError GetProcAddress BeginUpdateResourceW CreateJobSet SetComputerNameA WriteConsoleA UnhandledExceptionFilter GetConsoleScreenBufferInfo LocalAlloc RemoveDirectoryW SetThreadIdealProcessor GetModuleFileNameA FindNextFileA EnumDateFormatsA CreateMutexA FreeEnvironmentStringsW GetConsoleTitleW SetCalendarInfoA SetFileShortNameA TerminateJobObject FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak SetFilePointer WriteConsoleW FlushFileBuffers WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW HeapCreate ExitProcess WriteFile GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId CloseHandle SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode CreateFileW

user32

GetMenu DefDlgProcW

Sharing

General

Malware Config

Signatures

File Explorer

eaa7becc44c26c1d802981d439fc436c34cbd399a891886c5c65fcc21d7372b7

kernel32

user32

generic