a0f1ee0093d54ed7a1b7934ac507f558081db0dabedf0eba9b5bcd359e177a0e

General

Target
a0f1ee0093d54ed7a1b7934ac507f558081db0dabedf0eba9b5bcd359e177a0e
Size 353KB
Sample261027-e42zlscf69
SHA256 a0f1ee0093d54ed7a1b7934ac507f558081db0dabedf0eba9b5bcd359e177a0e
MD5 eff87f91351b50c41adf1a9dafd4157d
SHA1 716bfd2a010c328b8b66ea1cde444f8d55a07cb9
SHA512 b88c9ee56b55232e9a072fe4c232a596d714cef5eaf8df5572abe8f7053034e1bdf94a7f9d785b21be5a2dc0f39c5cdecb7e541cc717dad80e396ed0246485b5
SSDEEP 6144:Bvhi4p4hffHiyHeJVkHchzixawTWbkXQFVw98Ei4s1XHL:lh0fNMVkHAOwd+8EqL
TLSH
T176749E01F582C132C99D14707965DFB64A3DB8B11BA469C7B7C81EBB8A302D1AB34F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f1ee0093d54ed7a1b7934ac507f558081db0dabedf0eba9b5bcd359e177a0e

File Explorer

a0f1ee0093d54ed7a1b7934ac507f558081db0dabedf0eba9b5bcd359e177a0e

.dll 353KB

a0f1ee0093d54ed7a1b7934ac507f558081db0dabedf0eba9b5bcd359e177a0e

IMPHASH 02fb4c3134f0a56fdaf61c80db06c5f8
SHA256 a0f1ee0093d54ed7a1b7934ac507f558081db0dabedf0eba9b5bcd359e177a0e
MD5 eff87f91351b50c41adf1a9dafd4157d
SHA1 716bfd2a010c328b8b66ea1cde444f8d55a07cb9
SHA512 b88c9ee56b55232e9a072fe4c232a596d714cef5eaf8df5572abe8f7053034e1bdf94a7f9d785b21be5a2dc0f39c5cdecb7e541cc717dad80e396ed0246485b5
SSDEEP 6144:Bvhi4p4hffHiyHeJVkHchzixawTWbkXQFVw98Ei4s1XHL:lh0fNMVkHAOwd+8EqL
TLSH
T176749E01F582C132C99D14707965DFB64A3DB8B11BA469C7B7C81EBB8A302D1AB34F5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

123688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

GetDC GetMonitorInfoW MonitorFromWindow GetDesktopWindow SetWindowLongW GetWindowLongW AdjustWindowRectEx GetClientRect GetMenu IsIconic SetWindowPos IsWindow ReleaseDC MessageBoxA

gdi32

GetDeviceCaps

shell32

ShellExecuteA

kernel32

SetEndOfFile HeapSize GetConsoleMode GetConsoleOutputCP WriteFile ReadFile CreateFileW SetStdHandle SetFilePointerEx ReadConsoleW FlushFileBuffers InitializeSListHead FreeEnvironmentStringsW GetEnvironmentStringsW HeapAlloc GetProcessHeap GetSystemDirectoryW DisableThreadLibraryCalls GetProcAddress LoadLibraryA LoadLibraryW GetModuleFileNameW VirtualProtect GetModuleHandleA GetModuleHandleW WideCharToMultiByte GetLastError QueryPerformanceCounter QueryPerformanceFrequency LoadLibraryExW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx MultiByteToWideChar GetCPInfo LCMapStringEx GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime WriteConsoleW IsDebuggerPresent GetStartupInfoW GetCommandLineW RaiseException RtlUnwind InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary ExitProcess GetModuleHandleExW HeapFree HeapReAlloc GetStdHandle GetFileType CloseHandle FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA

Sharing

General

Malware Config

Signatures

File Explorer

a0f1ee0093d54ed7a1b7934ac507f558081db0dabedf0eba9b5bcd359e177a0e

user32

gdi32

shell32

kernel32

generic