88b48be0695a24e50976c508022a377a317b423dc69aea15d56bb4a615e33875

General

Target
88b48be0695a24e50976c508022a377a317b423dc69aea15d56bb4a615e33875
Size 224KB
Sample260828-lzervawtes
SHA256 88b48be0695a24e50976c508022a377a317b423dc69aea15d56bb4a615e33875
MD5 4349081a20e0aaa0df48546ed037d64f
SHA1 480ba4a122900b618765f4f2fe9111e0535004ea
SHA512 cdb1062f1029e095a5c5c9d91d135e3aeb0baa2b17e490cd0c234ef20f9214f97225d5e6077205d9d053a73f657abc09267f485db2dfaabe25017e5f2bcb2503
SSDEEP 6144:bnrw9xAPSRur8va8hJq3QGZH/j4F5M+Ky/aYRy:exh88xhJq3QGZfjYK+KJZ
TLSH
T19524CF22F3C0C471E0622431CA52E2B14E76FD72CD72549BBBC4577BAF7A6A1E918346
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88b48be0695a24e50976c508022a377a317b423dc69aea15d56bb4a615e33875

File Explorer

88b48be0695a24e50976c508022a377a317b423dc69aea15d56bb4a615e33875

.exe 224KB

88b48be0695a24e50976c508022a377a317b423dc69aea15d56bb4a615e33875

IMPHASH b69c2bc82a9f0590c69411a07af9f395
SHA256 88b48be0695a24e50976c508022a377a317b423dc69aea15d56bb4a615e33875
MD5 4349081a20e0aaa0df48546ed037d64f
SHA1 480ba4a122900b618765f4f2fe9111e0535004ea
SHA512 cdb1062f1029e095a5c5c9d91d135e3aeb0baa2b17e490cd0c234ef20f9214f97225d5e6077205d9d053a73f657abc09267f485db2dfaabe25017e5f2bcb2503
SSDEEP 6144:bnrw9xAPSRur8va8hJq3QGZH/j4F5M+Ky/aYRy:exh88xhJq3QGZfjYK+KJZ
TLSH
T19524CF22F3C0C471E0622431CA52E2B14E76FD72CD72549BBBC4577BAF7A6A1E918346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

63735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError CloseHandle CreateFileA GetFileSize MapViewOfFile UnmapViewOfFile GetTickCount WriteFile SetLastError GetProcAddress CreateFileMappingA GetModuleFileNameA GetModuleHandleA DeleteFileA HeapReAlloc MoveFileExA CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree GetProcessHeap GetExitCodeProcess TerminateProcess GetTempFileNameA GetLocalTime LoadLibraryA DuplicateHandle GetTempPathA GetFullPathNameA GetThreadContext GetCurrentThread IsBadReadPtr ExpandEnvironmentStringsA WideCharToMultiByte GetFileAttributesA GetEnvironmentVariableA MultiByteToWideChar CreateDirectoryA FindFirstFileA RemoveDirectoryA FindClose GetCurrentDirectoryA GetCurrentProcessId GetVolumeInformationW WaitForSingleObject DeleteCriticalSection EnterCriticalSection LeaveCriticalSection OpenProcess CreateFileW GetCurrentThreadId EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW HeapCreate GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapSize RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW InitializeCriticalSectionAndSpinCount RtlUnwind SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime LoadLibraryW GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleW VirtualQuery

advapi32

CheckTokenMembership RegCloseKey FreeSid AllocateAndInitializeSid RegOpenKeyExA RegQueryValueExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

shell32

ShellExecuteExW

Sharing

General

Malware Config

Signatures

File Explorer

88b48be0695a24e50976c508022a377a317b423dc69aea15d56bb4a615e33875

kernel32

advapi32

shell32

generic