44b7eebf7a26d466f9c7ad4ddb058503f7066aded180ab6d5162197c47780293

General

Target
44b7eebf7a26d466f9c7ad4ddb058503f7066aded180ab6d5162197c47780293
Size 444KB
Sample260326-qrakdaf13m
SHA256 44b7eebf7a26d466f9c7ad4ddb058503f7066aded180ab6d5162197c47780293
MD5 be5af780a67635d1eae32bc959450aff
SHA1 57a544e97bdb613411b1d1d0b25b563c9d63fce4
SHA512 3524cf6e4cdfc7d85d4354ab9574b3c805557e9155d99858f90c59fe79b093341b212a3d408326157ca23e155e0e65eee274dc9301f7fe799bf9409e61ddcfc9
SSDEEP 12288:Z1se5TMrBYVsXRFd8bo/liIrEWuzrViA7uWSBwpPQE5H9y:Z1se5jsXRFd8aliIrEfrViAyf6QE5H9y
TLSH
T190A43A7FD6E8C22DE691803C52DAC3F06D69E6775C11078773A06EB0AA38BE19467713
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b7eebf7a26d466f9c7ad4ddb058503f7066aded180ab6d5162197c47780293

File Explorer

44b7eebf7a26d466f9c7ad4ddb058503f7066aded180ab6d5162197c47780293

.exe 444KB

44b7eebf7a26d466f9c7ad4ddb058503f7066aded180ab6d5162197c47780293

IMPHASH 35495a5b7aceef7bd3ccd60fc1242e54
SHA256 44b7eebf7a26d466f9c7ad4ddb058503f7066aded180ab6d5162197c47780293
MD5 be5af780a67635d1eae32bc959450aff
SHA1 57a544e97bdb613411b1d1d0b25b563c9d63fce4
SHA512 3524cf6e4cdfc7d85d4354ab9574b3c805557e9155d99858f90c59fe79b093341b212a3d408326157ca23e155e0e65eee274dc9301f7fe799bf9409e61ddcfc9
SSDEEP 12288:Z1se5TMrBYVsXRFd8bo/liIrEWuzrViA7uWSBwpPQE5H9y:Z1se5jsXRFd8aliIrEfrViAyf6QE5H9y
TLSH
T190A43A7FD6E8C22DE691803C52DAC3F06D69E6775C11078773A06EB0AA38BE19467713
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

212987

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

MessageBoxA

shell32

SHGetFolderPathA ShellExecuteA

kernel32

LoadLibraryExW WriteConsoleW CreateFileW HeapReAlloc HeapSize GetEnvironmentVariableA CreateFileA GetDiskFreeSpaceExA GetDriveTypeA WriteFile CloseHandle GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetSystemDirectoryA VirtualAlloc VirtualFree GetProcAddress LoadLibraryA GetTimeZoneInformationForYear WTSGetActiveConsoleSessionId IsValidCodePage GetFileSizeEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary DecodePointer EncodePointer RaiseException GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW SetStdHandle GetFileType GetConsoleOutputCP GetConsoleMode HeapAlloc HeapFree CompareStringW LCMapStringW FindClose FindFirstFileExW FindNextFileW GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetProcessHeap SetFilePointerEx ReadFile ReadConsoleW FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

44b7eebf7a26d466f9c7ad4ddb058503f7066aded180ab6d5162197c47780293

user32

shell32

kernel32

generic