c938bbbfddaf7ec67c9155959751c58f65a5711968101eb4d2cd4db0c772b83aN

General

Target
c938bbbfddaf7ec67c9155959751c58f65a5711968101eb4d2cd4db0c772b83aN
Size 1.9MB
Sample241109-skvyvaxapl
SHA256 c938bbbfddaf7ec67c9155959751c58f65a5711968101eb4d2cd4db0c772b83a
MD5 ef297cf3fa527914c13c7ac80edd9f40
SHA1 a98b83f0feee401d973640f4e802fdd99a9e7bc6
SHA512 1c314a978499c0aa56012baac95e3e3a3b4cc3885c7f0e55c33cd9a3a8970ca457d8d8def3fb212f6a9dbfe08609764352951362eda0bd7c6d6f074d464f9c93
SSDEEP 49152:7QU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4B5eeqfn8+nFFQCxEsJwKQb:7faNQh+NUABO/c0Y9Ad6eqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c938bbbfddaf7ec67c9155959751c58f65a5711968101eb4d2cd4db0c772b83aN

File Explorer

c938bbbfddaf7ec67c9155959751c58f65a5711968101eb4d2cd4db0c772b83aN

.dll 1.9MB

c938bbbfddaf7ec67c9155959751c58f65a5711968101eb4d2cd4db0c772b83aN

IMPHASH 2aba7c4b8dab457cf3783773a69d6c13
SHA256 c938bbbfddaf7ec67c9155959751c58f65a5711968101eb4d2cd4db0c772b83a
MD5 ef297cf3fa527914c13c7ac80edd9f40
SHA1 a98b83f0feee401d973640f4e802fdd99a9e7bc6
SHA512 1c314a978499c0aa56012baac95e3e3a3b4cc3885c7f0e55c33cd9a3a8970ca457d8d8def3fb212f6a9dbfe08609764352951362eda0bd7c6d6f074d464f9c93
SSDEEP 49152:7QU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4B5eeqfn8+nFFQCxEsJwKQb:7faNQh+NUABO/c0Y9Ad6eqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1395915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Safe\Share\Born\magnet\Thin.pdb

kernel32

QueryPerformanceCounter CreateFileW GetWindowsDirectoryW GetSystemTime GetModuleHandleW GetVersionExW OpenProcess GetDateFormatW SizeofResource LockResource LoadLibraryW ExitProcess GetFileTime WideCharToMultiByte GetModuleFileNameW TlsAlloc GetTempPathW VirtualProtect CreateSemaphoreW GetCurrentDirectoryW GetEnvironmentVariableW CompareStringW CompareStringA CreateFileA GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetTimeZoneInformation LoadLibraryA FreeLibrary SetConsoleCtrlHandler CloseHandle SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile HeapSize IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetOEMCP GetACP GetDateFormatA GetTimeFormatA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree GetCurrentThreadId GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetProcAddress GetModuleHandleA TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThread HeapDestroy HeapCreate VirtualFree FatalAppExitA VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableA

setupapi

SetupQueryInfVersionInformationW SetupCreateDiskSpaceListW SetupQuerySpaceRequiredOnDriveW SetupGetSourceInfoW SetupQueryDrivesInDiskSpaceListW SetupDefaultQueueCallbackW SetupTermDefaultQueueCallback SetupAddToSourceListW SetupDestroyDiskSpaceList SetupGetTargetPathW SetupGetLineByIndexW SetupFreeSourceListW SetupGetLineCountW SetupGetFieldCount SetupPromptForDiskW SetupSetPlatformPathOverrideW SetupSetSourceListW SetupRemoveFromSourceListW SetupRemoveFromDiskSpaceListW SetupPromptReboot SetupQuerySourceListW SetupQueueRenameW SetupQueueCopyW SetupInitDefaultQueueCallback SetupGetIntField SetupGetLineTextW SetupCancelTemporarySourceList SetupCopyOEMInfW SetupQueueDefaultCopyW SetupGetStringFieldW SetupIterateCabinetW

Sharing

General

Malware Config

Signatures

File Explorer

c938bbbfddaf7ec67c9155959751c58f65a5711968101eb4d2cd4db0c772b83aN

kernel32

setupapi

generic