fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089

General

Target
fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089
Size 293KB
Sample260827-m39bashc54
SHA256 fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089
MD5 abd3c728e88ea17ec02360d8d6932bee
SHA1 4801cb217d77d13a5d09606b29495e55377b475d
SHA512 e16f253d8f0a1c8d3c530c11a5c5b030cfc78f693308f26da4cf33a547e87aba5ec8ce6bb8c70dd6b8663fca6bf491ce1c54336e79fd86e63628333fb02a4e98
SSDEEP 6144:t/4Eju1iYJDD9KWdmkoN9fHprEBnL5r2GtGrjLZepht99GwO:t4Eii8DDcW0fz5EBJ2GtGrjLZepht99o
TLSH
T175548D1F3FED7C62C6B65F310D19DA6425CDF5AC0DBA2A9B364CC93A8934DD2C212921
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089

File Explorer

fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089

.exe 293KB

fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089

IMPHASH 23d9885e34e7e348ad41b64d2b5ba5cb
SHA256 fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089
MD5 abd3c728e88ea17ec02360d8d6932bee
SHA1 4801cb217d77d13a5d09606b29495e55377b475d
SHA512 e16f253d8f0a1c8d3c530c11a5c5b030cfc78f693308f26da4cf33a547e87aba5ec8ce6bb8c70dd6b8663fca6bf491ce1c54336e79fd86e63628333fb02a4e98
SSDEEP 6144:t/4Eju1iYJDD9KWdmkoN9fHprEBnL5r2GtGrjLZepht99GwO:t4Eii8DDcW0fz5EBJ2GtGrjLZepht99o
TLSH
T175548D1F3FED7C62C6B65F310D19DA6425CDF5AC0DBA2A9B364CC93A8934DD2C212921
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11401

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime VirtualProtect SetLastError GetLongPathNameW GetCurrentProcess SetProcessAffinityMask TerminateProcess GetSystemTimes SetProcessShutdownParameters GetProcessId LocalAlloc GetCommTimeouts GetModuleHandleA GetLastError GetMailslotInfo TerminateThread LoadLibraryA lstrcatW lstrcpyA CloseHandle GetNativeSystemInfo AddAtomA GetSystemTime GlobalMemoryStatus SetProcessWorkingSetSize GetProcessHandleCount WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize GetProcessHeap GetStringTypeW SetStdHandle LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc EncodePointer DecodePointer GetFileType FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW CreateFileW

user32

GetMessageExtraInfo GetDC GetScrollRange PeekMessageW GetMonitorInfoA GetPropA SetPropW EnableScrollBar ShowScrollBar

shell32

ShellExecuteA ShellAboutA

msimg32

TransparentBlt AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089

kernel32

user32

shell32

msimg32

generic