ac53e7ff1066702a706eb444970e6ed66e3d60f4e90990c21cdfc69cd790b300

General

Target
ac53e7ff1066702a706eb444970e6ed66e3d60f4e90990c21cdfc69cd790b300
Size 692KB
Sample260828-rmrtjadb96
SHA256 ac53e7ff1066702a706eb444970e6ed66e3d60f4e90990c21cdfc69cd790b300
MD5 d4a3dadce66c83aa2f536ec2a53551c9
SHA1 56cee062960da303898828441bca7a2a9a574915
SHA512 e9b50b28eac66fc34d0ca4df9eec3b700809648774668391fdf076fe430b43b78f206dc7d15a5adc241f0ad7c80e2e609df2ee45da9cbfc7b182cd95f862f14c
SSDEEP 12288:+ZW/rY/jHlIt+WAbo2lC/IKRps95ErjYN97mJDqotPrJHPQc:+ZW/k/jHlIt+tCIKR1HYNRmr/
TLSH
T16AE47C127556C035E94E12B21926BFFA97BC9C306BF288DF57D02F7AAD301C27A35912
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac53e7ff1066702a706eb444970e6ed66e3d60f4e90990c21cdfc69cd790b300

File Explorer

ac53e7ff1066702a706eb444970e6ed66e3d60f4e90990c21cdfc69cd790b300

.dll 692KB

ac53e7ff1066702a706eb444970e6ed66e3d60f4e90990c21cdfc69cd790b300

IMPHASH efcc75f56c2b4a43efb9b157082a83c2
SHA256 ac53e7ff1066702a706eb444970e6ed66e3d60f4e90990c21cdfc69cd790b300
MD5 d4a3dadce66c83aa2f536ec2a53551c9
SHA1 56cee062960da303898828441bca7a2a9a574915
SHA512 e9b50b28eac66fc34d0ca4df9eec3b700809648774668391fdf076fe430b43b78f206dc7d15a5adc241f0ad7c80e2e609df2ee45da9cbfc7b182cd95f862f14c
SSDEEP 12288:+ZW/rY/jHlIt+WAbo2lC/IKRps95ErjYN97mJDqotPrJHPQc:+ZW/k/jHlIt+tCIKR1HYNRmr/
TLSH
T16AE47C127556C035E94E12B21926BFFA97BC9C306BF288DF57D02F7AAD301C27A35912
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

111822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

kernel32

GetModuleFileNameW FormatMessageW GetLastError LocalFree WideCharToMultiByte FormatMessageA VirtualQuery WaitForSingleObject SetEvent CloseHandle ResetEvent CreateEventA GetProcAddress FreeLibrary LoadLibraryExW GetCurrentThreadId ReadFile CreatePipe Sleep GetStartupInfoA CreateProcessA GetDiskFreeSpaceExA GetEnvironmentVariableA GetLocalTime EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection WaitForSingleObjectEx CreateEventW GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeCriticalSectionEx EncodePointer DecodePointer GetLocaleInfoEx MultiByteToWideChar LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo GetCurrentDirectoryW CreateDirectoryW CreateFileW FlushFileBuffers GetFileAttributesExW GetFileInformationByHandle SetEndOfFile SetFilePointerEx DeviceIoControl AreFileApisANSI WriteConsoleW RtlUnwind InterlockedFlushSList RaiseException SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetFileSizeEx GetStdHandle GetFileType HeapAlloc WriteFile GetConsoleOutputCP GetConsoleMode HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapReAlloc GetTimeZoneInformation SetStdHandle HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

ac53e7ff1066702a706eb444970e6ed66e3d60f4e90990c21cdfc69cd790b300

advapi32

kernel32

generic