958092c7e3bcb005e1a7eac62d963bd704db95f966f632d431ce49f5ce80ab2c

General

Target
958092c7e3bcb005e1a7eac62d963bd704db95f966f632d431ce49f5ce80ab2c
Size 340KB
Sample260723-hx2l2sysbs
SHA256 958092c7e3bcb005e1a7eac62d963bd704db95f966f632d431ce49f5ce80ab2c
MD5 1aea6204e0823ccb37a9bd91b7ed2bd1
SHA1 60c9c04703983c82a970201cd50ee5e0533e1694
SHA512 98ca5f87fc43a7cb91865feab5cc4de2f1eb0de3ad848a54f6814bb242ad3ada287212c6f2fd5f15bb7a70bdc702a88a6d44ee49e64a1372385c12d39a182def
SSDEEP 6144:0kz8km3XXpWAXglnCMGZoyS095nDttUD1aco:/m3XXpWAXgrZ095DttU
TLSH
T15E743F5067F99229F6FB1F34687468608D3BB8D39D20E28D5649286D6D34F80EE71F23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
958092c7e3bcb005e1a7eac62d963bd704db95f966f632d431ce49f5ce80ab2c

File Explorer

958092c7e3bcb005e1a7eac62d963bd704db95f966f632d431ce49f5ce80ab2c

.exe 340KB

958092c7e3bcb005e1a7eac62d963bd704db95f966f632d431ce49f5ce80ab2c

IMPHASH b453892252e4c7f4913aa7cd6146ecf4
SHA256 958092c7e3bcb005e1a7eac62d963bd704db95f966f632d431ce49f5ce80ab2c
MD5 1aea6204e0823ccb37a9bd91b7ed2bd1
SHA1 60c9c04703983c82a970201cd50ee5e0533e1694
SHA512 98ca5f87fc43a7cb91865feab5cc4de2f1eb0de3ad848a54f6814bb242ad3ada287212c6f2fd5f15bb7a70bdc702a88a6d44ee49e64a1372385c12d39a182def
SSDEEP 6144:0kz8km3XXpWAXglnCMGZoyS095nDttUD1aco:/m3XXpWAXgrZ095DttU
TLSH
T15E743F5067F99229F6FB1F34687468608D3BB8D39D20E28D5649286D6D34F80EE71F23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

30527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersionExW FreeLibrary GetModuleFileNameW GetProcAddress LoadLibraryW lstrlenW MultiByteToWideChar lstrcmpW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetFileAttributesW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetEndOfFile HeapReAlloc HeapSize GetConsoleOutputCP FlushFileBuffers SetEnvironmentVariableW GetEnvironmentVariableW IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ReadFile GetStdHandle GetFileType GetModuleHandleExW WriteConsoleW WriteFile ExitProcess HeapFree HeapAlloc CloseHandle GetConsoleMode ReadConsoleW SetFilePointerEx OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW LCMapStringW GetProcessHeap CreateFileW GetFileSizeEx DecodePointer

user32

LoadStringW wsprintfW MessageBoxW

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

Sharing

General

Malware Config

Signatures

File Explorer

958092c7e3bcb005e1a7eac62d963bd704db95f966f632d431ce49f5ce80ab2c

kernel32

user32

advapi32

generic