fcf82b890a7f4a527327b05879ed30b192664fe14320483dae80a6bc6e8a45c0

General

Target
fcf82b890a7f4a527327b05879ed30b192664fe14320483dae80a6bc6e8a45c0
Size 216KB
Sample260720-eellbsg13z
SHA256 fcf82b890a7f4a527327b05879ed30b192664fe14320483dae80a6bc6e8a45c0
MD5 407d7211613a272fd2e995eac1002758
SHA1 0d8e59e9f156ac714b62d6583683176576aab5d1
SHA512 706699ea0a20af63db5b004989bc2c497934aa7998121ca0a10940ea192740935e0b145d987af80bb9d291e850a5d3f3dcd31113e6afe2e7f76a6f2fd3ed6690
SSDEEP 3072:izRk6Z46S0K4KAakQXMVRAgv7TA+XImL2lQBV+UdE+rECWp7hK/TcN:IC66r0GAavXMVfziqBV+UdvrEFp7hKoN
TLSH
T1CB24BF123281C3F5C19A1439352AD7214AFAA63D07FA94C7FB1129F95F2C6D3A67930E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf82b890a7f4a527327b05879ed30b192664fe14320483dae80a6bc6e8a45c0

File Explorer

fcf82b890a7f4a527327b05879ed30b192664fe14320483dae80a6bc6e8a45c0

.dll 216KB

fcf82b890a7f4a527327b05879ed30b192664fe14320483dae80a6bc6e8a45c0

IMPHASH 9ade5c162491aa66e606d88ce5db11b9
SHA256 fcf82b890a7f4a527327b05879ed30b192664fe14320483dae80a6bc6e8a45c0
MD5 407d7211613a272fd2e995eac1002758
SHA1 0d8e59e9f156ac714b62d6583683176576aab5d1
SHA512 706699ea0a20af63db5b004989bc2c497934aa7998121ca0a10940ea192740935e0b145d987af80bb9d291e850a5d3f3dcd31113e6afe2e7f76a6f2fd3ed6690
SSDEEP 3072:izRk6Z46S0K4KAakQXMVRAgv7TA+XImL2lQBV+UdE+rECWp7hK/TcN:IC66r0GAavXMVfziqBV+UdvrEFp7hKoN
TLSH
T1CB24BF123281C3F5C19A1439352AD7214AFAA63D07FA94C7FB1129F95F2C6D3A67930E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

56049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\workspace\WinToHDD\Output\Win32\Release\intl.pdb

kernel32

EnumResourceLanguagesW GetThreadLocale GetProcAddress GetLastError GetLocaleInfoA GetACP GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFileType HeapReAlloc MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InterlockedDecrement GetCPInfo WideCharToMultiByte GetCurrentThreadId GetCommandLineA TerminateProcess GetCurrentProcess IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapCreate HeapDestroy VirtualFree DeleteCriticalSection VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetOEMCP IsValidCodePage LCMapStringA LCMapStringW SetStdHandle SetHandleCount GetStartupInfoA RtlUnwind CloseHandle GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA InitializeCriticalSectionAndSpinCount CompareStringA CompareStringW SetEnvironmentVariableA GetTimeZoneInformation SetFilePointer ReadFile CreateFileA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize SetEndOfFile GetProcessHeap GetDriveTypeA GetFullPathNameA GetCurrentDirectoryA GetModuleHandleA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

fcf82b890a7f4a527327b05879ed30b192664fe14320483dae80a6bc6e8a45c0

kernel32

advapi32

generic