79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02

General

Target
79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02
Size 107KB
Sample260720-gv9zzaaz71
SHA256 79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02
MD5 f04616d2cbdba71d60ea3f782208b72d
SHA1 55bc4508aaecff81f0bf291a5864e405951615d8
SHA512 88eaa600bfb05fe966c175d909ff7f3c6c4e0fdc8d43b259558534e6b7c3c0cfbcd7440c96dc1cc917cfd024d3dbc2d3093f29e18bf696e53ec90d31caa36bfb
SSDEEP 1536:RCw+12vcsnfqviObADdxSPfaljwgxXOCW7JDYX8CsWYdYz9dlGN8ra:0whfbuADIf60gxXtiJEMVwYN8ra
TLSH
T174B36B5BB7A530F8E5778678C8910A41D772B83217A09FAF07B446861F632D18D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02

File Explorer

79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02

.exe 107KB

79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02

IMPHASH 357360a265e529d29ef965b96a0083b0
SHA256 79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02
MD5 f04616d2cbdba71d60ea3f782208b72d
SHA1 55bc4508aaecff81f0bf291a5864e405951615d8
SHA512 88eaa600bfb05fe966c175d909ff7f3c6c4e0fdc8d43b259558534e6b7c3c0cfbcd7440c96dc1cc917cfd024d3dbc2d3093f29e18bf696e53ec90d31caa36bfb
SSDEEP 1536:RCw+12vcsnfqviObADdxSPfaljwgxXOCW7JDYX8CsWYdYz9dlGN8ra:0whfbuADIf60gxXtiJEMVwYN8ra
TLSH
T174B36B5BB7A530F8E5778678C8910A41D772B83217A09FAF07B446861F632D18D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4804

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FreeLibrary GetProcAddress LoadLibraryA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

79bdf1d0141abd8e2f36c712c9269b73b24f4d2f9a809d7c333035ef4cfb7c02

kernel32

generic