c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62

General

Target
c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62
Size 132KB
Sample260930-a3afrayx3q
SHA256 c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62
MD5 35a7adcdaa78931d9b254e3d8de60c30
SHA1 37ec52ebf8754ab9c1d9acfb1e78eee3b99f3ffc
SHA512 c1eb6c68a83ac6274a7ab3af1675dd760cb097de2ef83936f38411e103ff3b91476ac29bb34b74449a8a2f275b5b0f0c2a0116a87b5ff868ecf9d5d727da0306
SSDEEP 3072:z3Tsq8wXAQrOPtZu5vkJbr6zbsd7eBicOafXf/v:7TVyP7u5qeMJafv/
TLSH
T13CD3B865A3D5A912E857433418FF62367634BC22837286C7B701D27C2BB37F0A976396
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62

File Explorer

c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62

.dll 132KB

c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62

IMPHASH de7edc90cf04280b7a95107a70756284
SHA256 c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62
MD5 35a7adcdaa78931d9b254e3d8de60c30
SHA1 37ec52ebf8754ab9c1d9acfb1e78eee3b99f3ffc
SHA512 c1eb6c68a83ac6274a7ab3af1675dd760cb097de2ef83936f38411e103ff3b91476ac29bb34b74449a8a2f275b5b0f0c2a0116a87b5ff868ecf9d5d727da0306
SSDEEP 3072:z3Tsq8wXAQrOPtZu5vkJbr6zbsd7eBicOafXf/v:7TVyP7u5qeMJafv/
TLSH
T13CD3B865A3D5A912E857433418FF62367634BC22837286C7B701D27C2BB37F0A976396
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

40000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

MultinetGetConnectionPerformanceA MultinetGetConnectionPerformanceW MultinetGetErrorTextA MultinetGetErrorTextW NPSAuthenticationDialogA NPSCopyStringA NPSDeviceGetNumberA NPSDeviceGetStringA NPSGetProviderHandleA NPSGetProviderNameA NPSGetSectionNameA NPSNotifyGetContextA NPSNotifyRegisterA NPSSetCustomTextA NPSSetExtendedErrorA PwdChangePasswordA PwdChangePasswordW PwdGetPasswordStatusA PwdGetPasswordStatusW PwdSetPasswordStatusA PwdSetPasswordStatusW WNetAddConnection2A WNetAddConnection2W WNetAddConnection3A WNetAddConnection3W WNetAddConnectionA WNetAddConnectionW WNetCachePassword WNetCancelConnection2A WNetCancelConnection2W WNetCancelConnectionA WNetCancelConnectionW WNetClearConnections WNetCloseEnum WNetConnectionDialog WNetConnectionDialog1A WNetConnectionDialog1W WNetDisconnectDialog WNetDisconnectDialog1A WNetDisconnectDialog1W WNetEnumCachedPasswords WNetEnumResourceA WNetEnumResourceW WNetFMXEditPerm WNetFMXGetPermCaps WNetFMXGetPermHelp WNetFormatNetworkNameA WNetFormatNetworkNameW WNetGetCachedPassword WNetGetConnectionA WNetGetConnectionW WNetGetDirectoryTypeA WNetGetHomeDirectoryA WNetGetHomeDirectoryW WNetGetLastErrorA WNetGetLastErrorW WNetGetNetworkInformationA WNetGetNetworkInformationW WNetGetPropertyTextA WNetGetProviderNameA WNetGetProviderNameW WNetGetResourceInformationA WNetGetResourceInformationW WNetGetResourceParentA WNetGetResourceParentW WNetGetUniversalNameA WNetGetUniversalNameW WNetGetUserA WNetGetUserW WNetLogoffA WNetLogoffW WNetLogonA WNetLogonNotify WNetLogonW WNetOpenEnumA WNetOpenEnumW WNetPasswordChangeNotify WNetPropertyDialogA WNetRemoveCachedPassword WNetRestoreConnection WNetRestoreConnectionA WNetRestoreConnectionW WNetSetConnectionA WNetSetConnectionW WNetUseConnectionA WNetUseConnectionW WNetVerifyPasswordA WNetVerifyPasswordW

c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62

user32

advapi32

ucrtbase

kernel32

ntdll

generic

Sharing

General

Malware Config

Signatures

File Explorer

c535eb9ed2f64d48e4853c54a31bb34fcc74c14c4489534f97495c0686e41f62

user32

advapi32

ucrtbase

kernel32

ntdll

generic