96ad3c808d842df0f2c8d91edfddb6b9a350eb5a2ca06edd72768d4248a90036

General

Target
96ad3c808d842df0f2c8d91edfddb6b9a350eb5a2ca06edd72768d4248a90036
Size 118KB
Sample260916-tmalcsbf52
SHA256 96ad3c808d842df0f2c8d91edfddb6b9a350eb5a2ca06edd72768d4248a90036
MD5 beae44ec2bff6c3ec075c97c0bac3314
SHA1 03146955cc666502ccb1af30060ff21e3b5e19ae
SHA512 15f0530ce895a6d8ec1966e39b5d38a3a23cf80642a034b8c093a7843688497f4128112266927158da7289e68d06bcaeca6dcd01dec93e6dd43324eec190ae3e
SSDEEP 3072:g+2yFLc1s6UdafNbdeowW3qwDasew2PvGxeJePKWHw//DD:g+2yoUdaZ3wiqGe9PvNgmDD
TLSH
T1E8C38C02B5C0C072E57229350838CBB19E7EFD341F60AE9B7798167A5F352C19A35E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96ad3c808d842df0f2c8d91edfddb6b9a350eb5a2ca06edd72768d4248a90036

File Explorer

96ad3c808d842df0f2c8d91edfddb6b9a350eb5a2ca06edd72768d4248a90036

.exe 118KB

96ad3c808d842df0f2c8d91edfddb6b9a350eb5a2ca06edd72768d4248a90036

IMPHASH 7ca6bbe66264773a8cf5815f2f15edd3
SHA256 96ad3c808d842df0f2c8d91edfddb6b9a350eb5a2ca06edd72768d4248a90036
MD5 beae44ec2bff6c3ec075c97c0bac3314
SHA1 03146955cc666502ccb1af30060ff21e3b5e19ae
SHA512 15f0530ce895a6d8ec1966e39b5d38a3a23cf80642a034b8c093a7843688497f4128112266927158da7289e68d06bcaeca6dcd01dec93e6dd43324eec190ae3e
SSDEEP 3072:g+2yFLc1s6UdafNbdeowW3qwDasew2PvGxeJePKWHw//DD:g+2yoUdaZ3wiqGe9PvNgmDD
TLSH
T1E8C38C02B5C0C072E57229350838CBB19E7EFD341F60AE9B7798167A5F352C19A35E6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7940

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleW Process32NextW Process32FirstW CreateToolhelp32Snapshot GetTickCount OpenProcess GetCurrentProcess Sleep GetLastError CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CreateFileW DecodePointer

advapi32

OpenProcessToken StartServiceW OpenServiceW OpenSCManagerW ControlService CloseServiceHandle GetUserNameW LookupPrivilegeValueW ImpersonateLoggedOnUser AdjustTokenPrivileges

Sharing

General

Malware Config

Signatures

File Explorer

96ad3c808d842df0f2c8d91edfddb6b9a350eb5a2ca06edd72768d4248a90036

kernel32

advapi32

generic