6464f1b8ab716327ab26aca232c6d317c1aeca8edc6de8ac1c6dc8ef4d293a23

Sharing

Copy URL Twitter E-mail

General

Target
6464f1b8ab716327ab26aca232c6d317c1aeca8edc6de8ac1c6dc8ef4d293a23
Size 490KB
Sample260810-ravdwsgf44
SHA256 6464f1b8ab716327ab26aca232c6d317c1aeca8edc6de8ac1c6dc8ef4d293a23
MD5 92d51dcb31f1e641189d46d3a453bea0
SHA1 07e47540073ecc4e522701a6f445c0d1e8b8dffd
SHA512 55f244e9da4950470398f6a7ec972187e84049b09bc2a64c9c80c6468705e52058202390fb7e7e6ef5e479ff30f7a4888b57994b2347166a087f32d721ed5897
SSDEEP 12288:d4H1oci6+WUgppiuFxfaimI0CraqrlR3EEV3:d4H1jhUgOOxfFd0maJ
TLSH
T13AB459017792D0B1C5D125B24E6BA65256E87F303B244AFFF3B4392D2A314D2BE3761A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6464f1b8ab716327ab26aca232c6d317c1aeca8edc6de8ac1c6dc8ef4d293a23

File Explorer

6464f1b8ab716327ab26aca232c6d317c1aeca8edc6de8ac1c6dc8ef4d293a23

.exe 490KB

6464f1b8ab716327ab26aca232c6d317c1aeca8edc6de8ac1c6dc8ef4d293a23

IMPHASH e3c9e4efdbdd865dd417181adf33c3ca
SHA256 6464f1b8ab716327ab26aca232c6d317c1aeca8edc6de8ac1c6dc8ef4d293a23
MD5 92d51dcb31f1e641189d46d3a453bea0
SHA1 07e47540073ecc4e522701a6f445c0d1e8b8dffd
SHA512 55f244e9da4950470398f6a7ec972187e84049b09bc2a64c9c80c6468705e52058202390fb7e7e6ef5e479ff30f7a4888b57994b2347166a087f32d721ed5897
SSDEEP 12288:d4H1oci6+WUgppiuFxfaimI0CraqrlR3EEV3:d4H1jhUgOOxfFd0maJ
TLSH
T13AB459017792D0B1C5D125B24E6BA65256E87F303B244AFFF3B4392D2A314D2BE3761A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

227734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualFree GetModuleHandleW GetProcAddress GetStdHandle GetFileInformationByHandle ReadFile WriteFile GetSystemTimeAsFileTime GetModuleHandleA GlobalMemoryStatus GetProcessAffinityMask CreateFileW SetFileTime SetLastError FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetCurrentDirectoryW CreateDirectoryW DeleteFileW RemoveDirectoryW SetFileAttributesW GetTempPathW GetCurrentProcessId GetCurrentThreadId FreeLibrary GetModuleFileNameW LoadLibraryExW MultiByteToWideChar WideCharToMultiByte GetVersion IsProcessorFeaturePresent LeaveCriticalSection EnterCriticalSection SetThreadAffinityMask ResumeThread CreateSemaphoreW CreateEventW WaitForSingleObject ReleaseSemaphore ResetEvent SetEvent InitializeCriticalSection CloseHandle GetTickCount GetLocalTime GetSystemTime GetSystemInfo GetCurrentProcess Sleep IsDebuggerPresent OutputDebugStringW GetFullPathNameW TerminateProcess GetStartupInfoW FindResourceExW LoadResource LockResource SizeofResource FindResourceW lstrlenW MoveFileExW FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter QueryPerformanceCounter InitializeSListHead RtlUnwind EncodePointer VirtualQuery InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess LCMapStringW GetFileType GetConsoleOutputCP GetConsoleMode SetFilePointerEx FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW WriteConsoleW DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap VirtualAlloc HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy SetErrorMode GetLastError RaiseException DecodePointer

user32

DefWindowProcW CharUpperW

ole32

CoTaskMemFree CoCreateGuid StringFromCLSID CoInitialize CoUninitialize

oleaut32

VariantCopy SysFreeString SysAllocStringLen VariantClear SysStringLen

shell32

SHCreateDirectoryExW

shlwapi

PathCombineW PathIsDirectoryW PathFileExistsW PathAppendW

Sharing

General

Malware Config

Signatures

File Explorer

6464f1b8ab716327ab26aca232c6d317c1aeca8edc6de8ac1c6dc8ef4d293a23

kernel32

user32

ole32

oleaut32

shell32

shlwapi

generic