2a9343099f03548adf80293cfaad02e4fd9d818d33a3e68c820dc67f085650d7

General

Target
2a9343099f03548adf80293cfaad02e4fd9d818d33a3e68c820dc67f085650d7
Size 2.6MB
Sample260825-t2etmacl4x
SHA256 2a9343099f03548adf80293cfaad02e4fd9d818d33a3e68c820dc67f085650d7
MD5 13fd6f03811e881d4cd0753048c058b3
SHA1 51b85e76484b5471ab32c409ddb21ba667b07b62
SHA512 6f5f947121d053a81294051927a41232822fa1e5524dc34614af6c9ecdc7aedd8ade6cf391a730efea2ad909e14baa540eb59fb9d80e5ed865e500f998009265
SSDEEP 49152:XMhXUfFdyoIN9kTk07ju92xI8GCjFC2EsMDr6mMRE4657AUi/Ft3n8QmVaI/Guvq:VfpakQo22q8tBC2CFn4657ZOfn5mVaay
TLSH
T1B0C53381F6B08CB2F41B3076624D5957B36F8D91A76DC113EB42204EC6F79E0E6AB784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a9343099f03548adf80293cfaad02e4fd9d818d33a3e68c820dc67f085650d7

File Explorer

2a9343099f03548adf80293cfaad02e4fd9d818d33a3e68c820dc67f085650d7

.exe 2.6MB

2a9343099f03548adf80293cfaad02e4fd9d818d33a3e68c820dc67f085650d7

IMPHASH df9564805dc174a694895f78775d32d5
SHA256 2a9343099f03548adf80293cfaad02e4fd9d818d33a3e68c820dc67f085650d7
MD5 13fd6f03811e881d4cd0753048c058b3
SHA1 51b85e76484b5471ab32c409ddb21ba667b07b62
SHA512 6f5f947121d053a81294051927a41232822fa1e5524dc34614af6c9ecdc7aedd8ade6cf391a730efea2ad909e14baa540eb59fb9d80e5ed865e500f998009265
SSDEEP 49152:XMhXUfFdyoIN9kTk07ju92xI8GCjFC2EsMDr6mMRE4657AUi/Ft3n8QmVaI/Guvq:VfpakQo22q8tBC2CFn4657ZOfn5mVaay
TLSH
T1B0C53381F6B08CB2F41B3076624D5957B36F8D91A76DC113EB42204EC6F79E0E6AB784
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

30147

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA SetFilePointer WriteFile ReadFile CreateFileW GetLastError CloseHandle VirtualFree VirtualAlloc LeaveCriticalSection EnterCriticalSection DeleteCriticalSection WaitForSingleObject InitializeCriticalSection CreateMutexW FindFirstFileW FindResourceW LoadResource CreateDirectoryW OutputDebugStringW Sleep SizeofResource GetModuleFileNameW FindClose LockResource RemoveDirectoryW FindNextFileW OutputDebugStringA DeleteFileW SetFileAttributesW FlushFileBuffers WriteConsoleW HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate HeapReAlloc GetProcAddress GetModuleHandleA ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LoadLibraryA GetCPInfo GetACP GetOEMCP GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

MessageBoxExW

shell32

ShellExecuteExW SHGetSpecialFolderPathW

Sharing

General

Malware Config

Signatures

File Explorer

2a9343099f03548adf80293cfaad02e4fd9d818d33a3e68c820dc67f085650d7

kernel32

user32

shell32

generic