a401791dbf8b4c841e75725a46f5fdde23f2132d8d3c0eda4b066caf6e1ae542

General

Target
a401791dbf8b4c841e75725a46f5fdde23f2132d8d3c0eda4b066caf6e1ae542
Size 220KB
Sample260718-tyez8aay4v
SHA256 a401791dbf8b4c841e75725a46f5fdde23f2132d8d3c0eda4b066caf6e1ae542
MD5 4e59a29d96c8395b14ba30c37b6f0850
SHA1 0e563f8b96f6447c7e1bd28531508d2d2c0676d6
SHA512 abc70896057f600c582d7fe40942c32b09938a916ae16166151fdd4aefb489cc9b675189d26cbf0fc50d26f1fe02dc559ddf7cab173590a79567e39cac147b26
SSDEEP 3072:vvn0d4kiaze4vyiQ4ZTP31SarlVjVFJath3+A2tAmmUgy5iuAg0Fuj01iEnWI38S:vseqzezETf15rlRVnamA2LLAOopWCRr
TLSH
T11E248E1174D2C473D8B2153549F8DBB9493DB9300B219AEB63E41B7E8E343C1A635BBA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a401791dbf8b4c841e75725a46f5fdde23f2132d8d3c0eda4b066caf6e1ae542

File Explorer

a401791dbf8b4c841e75725a46f5fdde23f2132d8d3c0eda4b066caf6e1ae542

.exe 220KB

a401791dbf8b4c841e75725a46f5fdde23f2132d8d3c0eda4b066caf6e1ae542

IMPHASH d30186d6c55763de88e758047a4f68b6
SHA256 a401791dbf8b4c841e75725a46f5fdde23f2132d8d3c0eda4b066caf6e1ae542
MD5 4e59a29d96c8395b14ba30c37b6f0850
SHA1 0e563f8b96f6447c7e1bd28531508d2d2c0676d6
SHA512 abc70896057f600c582d7fe40942c32b09938a916ae16166151fdd4aefb489cc9b675189d26cbf0fc50d26f1fe02dc559ddf7cab173590a79567e39cac147b26
SSDEEP 3072:vvn0d4kiaze4vyiQ4ZTP31SarlVjVFJath3+A2tAmmUgy5iuAg0Fuj01iEnWI38S:vseqzezETf15rlRVnamA2LLAOopWCRr
TLSH
T11E248E1174D2C473D8B2153549F8DBB9493DB9300B219AEB63E41B7E8E343C1A635BBA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

32262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Menu\Test\Test\Release\Test.pdb

kernel32

WriteConsoleW CreateProcessW CloseHandle GetModuleFileNameW HeapSize CreateFileW GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc HeapFree FlushFileBuffers GetConsoleOutputCP GetConsoleMode WaitForSingleObject GetExitCodeProcess GetFileAttributesExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP SetEndOfFile

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW

shell32

SHGetFolderPathW

wininet

InternetOpenUrlW InternetOpenW InternetCloseHandle InternetReadFile

Sharing

General

Malware Config

Signatures

File Explorer

a401791dbf8b4c841e75725a46f5fdde23f2132d8d3c0eda4b066caf6e1ae542

kernel32

advapi32

shell32

wininet

generic