b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232

General

Target
b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232
Size 541KB
Sample260706-j968qsct51
SHA256 b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232
MD5 de31191a44f8fabe7c49ad6935bdd4b3
SHA1 96915e28baf63b05b88859f1da6bc6b4f539e9be
SHA512 98241e925032b122f38fa1c9384b7f7da1aacb407f9035102987221767864707610da54496b0967dde9daaba2317dc4fcc0e6133eafe7755ca5ba4866571ee8d
SSDEEP 12288:hzQ+73GTthYiwEwJPFZRdIu8tAjjD6U0UCjIg1ibY6nmKd:yo3GT1wEW9WI3EIg1ibLm
TLSH
T1B5C4124B76B521EED5328239C92129A9C332F8351611DB6F07A5425B0F7F2D28D3BF62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232

File Explorer

b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232

.exe 541KB

b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232

IMPHASH e8a4cbdad25c90c1b143d5701f1c2ba5
SHA256 b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232
MD5 de31191a44f8fabe7c49ad6935bdd4b3
SHA1 96915e28baf63b05b88859f1da6bc6b4f539e9be
SHA512 98241e925032b122f38fa1c9384b7f7da1aacb407f9035102987221767864707610da54496b0967dde9daaba2317dc4fcc0e6133eafe7755ca5ba4866571ee8d
SSDEEP 12288:hzQ+73GTthYiwEwJPFZRdIu8tAjjD6U0UCjIg1ibY6nmKd:yo3GT1wEW9WI3EIg1ibLm
TLSH
T1B5C4124B76B521EED5328239C92129A9C332F8351611DB6F07A5425B0F7F2D28D3BF62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHGetFolderPathW ShellExecuteW

advapi32

RegSetValueExW RegOpenKeyExW RegCloseKey

kernel32

WriteConsoleW CreateFileW SetFileAttributesW WriteFile CloseHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx

Sharing

General

Malware Config

Signatures

File Explorer

b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232

shell32

advapi32

kernel32

generic