b815e389d8de5b5f4a3070b9ef6cd34015cc5f0605840d941fc8eeb20c22b0d1

General

Target
b815e389d8de5b5f4a3070b9ef6cd34015cc5f0605840d941fc8eeb20c22b0d1
Size 383KB
Sample260802-gr4c1styht
SHA256 b815e389d8de5b5f4a3070b9ef6cd34015cc5f0605840d941fc8eeb20c22b0d1
MD5 2074727db50201295eb48cb04e75505f
SHA1 91906991943468b433288b09fe64177bbd6075ed
SHA512 d41378a5295ddeb0279d02e805eb4413fe9a5d43428ddfeddcdc4c338de013dbc972382718f470010927953d8c18cad8ab40350e29e8693ee04770768428b588
SSDEEP 6144:65TAZuYlG/sk8ACvz53npVZ5q07QpkN8Pni/6+k1VucwDkbqOylE3:65ouYlGSnZ5q3ONzSTwDkRh3
TLSH
T184849E21B945C033D5921530CE39DB7A497DE9710F6629CBB3D81EBA4E70AC19B32B1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b815e389d8de5b5f4a3070b9ef6cd34015cc5f0605840d941fc8eeb20c22b0d1

File Explorer

b815e389d8de5b5f4a3070b9ef6cd34015cc5f0605840d941fc8eeb20c22b0d1

.exe 383KB

b815e389d8de5b5f4a3070b9ef6cd34015cc5f0605840d941fc8eeb20c22b0d1

IMPHASH dc9e5852e4826341c2cf68b56bc2a10e
SHA256 b815e389d8de5b5f4a3070b9ef6cd34015cc5f0605840d941fc8eeb20c22b0d1
MD5 2074727db50201295eb48cb04e75505f
SHA1 91906991943468b433288b09fe64177bbd6075ed
SHA512 d41378a5295ddeb0279d02e805eb4413fe9a5d43428ddfeddcdc4c338de013dbc972382718f470010927953d8c18cad8ab40350e29e8693ee04770768428b588
SSDEEP 6144:65TAZuYlG/sk8ACvz53npVZ5q07QpkN8Pni/6+k1VucwDkbqOylE3:65ouYlGSnZ5q3ONzSTwDkRh3
TLSH
T184849E21B945C033D5921530CE39DB7A497DE9710F6629CBB3D81EBA4E70AC19B32B1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

145736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenProcess VirtualQueryEx K32GetModuleFileNameExW GetProcAddress LoadLibraryW MultiByteToWideChar WideCharToMultiByte ReadFile WriteFile GetLastError ConnectNamedPipe CreateNamedPipeW SetEvent WaitForSingleObject CreateMutexW CreateEventW GetCurrentProcessId CreateFileMappingW OpenFileMappingW CloseHandle UnmapViewOfFile DeleteTimerQueueTimer CreateRemoteThread GetExitCodeThread GetProcessId GetNativeSystemInfo VirtualAllocEx ReadProcessMemory WriteProcessMemory VirtualFreeEx IsWow64Process GetModuleFileNameW GetModuleHandleW CreateToolhelp32Snapshot Module32FirstW Module32NextW GetTickCount64 CreateTimerQueueTimer IsDBCSLeadByteEx WriteConsoleW ExitProcess MapViewOfFile Sleep GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter WakeAllConditionVariable SleepConditionVariableSRW EncodePointer DecodePointer CompareStringEx GetCPInfo LCMapStringEx GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead RaiseException RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle GetCommandLineA GetCommandLineW HeapFree HeapReAlloc HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx SetStdHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap ReadConsoleW CreateFileW HeapSize SetEndOfFile

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl

Sharing

General

Malware Config

Signatures

File Explorer

b815e389d8de5b5f4a3070b9ef6cd34015cc5f0605840d941fc8eeb20c22b0d1

kernel32

advapi32

generic