4fb42c1a77b08ff59e78e0e7d00c03947470f45378b3397e4ca8dc85d39ab334

General

Target
4fb42c1a77b08ff59e78e0e7d00c03947470f45378b3397e4ca8dc85d39ab334
Size 204KB
Sample260802-dfp5gack3x
SHA256 4fb42c1a77b08ff59e78e0e7d00c03947470f45378b3397e4ca8dc85d39ab334
MD5 6c8bc591da5c05c336c89f0d6deea4f9
SHA1 7959a3c834b3e470dd2b93c8a25f18de92ee33d2
SHA512 83569c83769e8aa3336998d319b73abf659813372010558d27a75589bc36b73f420322337747e833515dcf6156c9e49f0164d1b11d2cb298a07b57cc52715cba
SSDEEP 3072:0fOBxFx5wr7aUUGEO3M8vqF+Ejdlxp7u92lbYyiB+N6LpCcu51lviIzdXfEqMlc5:SaUUGEO3VSzhlxdu92lcFB+h8WH
TLSH
T18914609033F80929F4F35E316E359F29993EBC359E35EB2E1654219E2D34A41D922B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fb42c1a77b08ff59e78e0e7d00c03947470f45378b3397e4ca8dc85d39ab334

File Explorer

4fb42c1a77b08ff59e78e0e7d00c03947470f45378b3397e4ca8dc85d39ab334

.exe 204KB

4fb42c1a77b08ff59e78e0e7d00c03947470f45378b3397e4ca8dc85d39ab334

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 4fb42c1a77b08ff59e78e0e7d00c03947470f45378b3397e4ca8dc85d39ab334
MD5 6c8bc591da5c05c336c89f0d6deea4f9
SHA1 7959a3c834b3e470dd2b93c8a25f18de92ee33d2
SHA512 83569c83769e8aa3336998d319b73abf659813372010558d27a75589bc36b73f420322337747e833515dcf6156c9e49f0164d1b11d2cb298a07b57cc52715cba
SSDEEP 3072:0fOBxFx5wr7aUUGEO3M8vqF+Ejdlxp7u92lbYyiB+N6LpCcu51lviIzdXfEqMlc5:SaUUGEO3VSzhlxdu92lcFB+h8WH
TLSH
T18914609033F80929F4F35E316E359F29993EBC359E35EB2E1654219E2D34A41D922B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

46610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

4fb42c1a77b08ff59e78e0e7d00c03947470f45378b3397e4ca8dc85d39ab334

kernel32

ole32

generic