ac1988d394c3337bbf5ef5d5bbbf972ed13d384b392b7acf938c838094520c9f

General

Target
ac1988d394c3337bbf5ef5d5bbbf972ed13d384b392b7acf938c838094520c9f
Size 161KB
Sample261102-2df1sadw2x
SHA256 ac1988d394c3337bbf5ef5d5bbbf972ed13d384b392b7acf938c838094520c9f
MD5 93a1d096198b360f6ce1be4ad98a56ca
SHA1 79430112c9ddb7dd14bb225985eb6b3585c8ba32
SHA512 70b2c213677482c171a9a2853611ce909eba1ad8a4e9b9403bdb8c4c23ebecfbc18741a59ba4c1b5c39a33807353ac7ce9b878232d11393343f5600dca5e830a
SSDEEP 3072:cUOUo2mtynQzFrWYbnnqoUc+DmBoXJ640FuzVvBdz:cUg2mtyQdWinTOt0SBdz
TLSH
T199F3F70175808470F76A0B3049A5E9E5096DED380AE4EADFE3B87E3A5E701D3693356F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1988d394c3337bbf5ef5d5bbbf972ed13d384b392b7acf938c838094520c9f

File Explorer

ac1988d394c3337bbf5ef5d5bbbf972ed13d384b392b7acf938c838094520c9f

.exe 161KB

ac1988d394c3337bbf5ef5d5bbbf972ed13d384b392b7acf938c838094520c9f

IMPHASH 12bd3b1f5fc8c9769bdad31b90226a14
SHA256 ac1988d394c3337bbf5ef5d5bbbf972ed13d384b392b7acf938c838094520c9f
MD5 93a1d096198b360f6ce1be4ad98a56ca
SHA1 79430112c9ddb7dd14bb225985eb6b3585c8ba32
SHA512 70b2c213677482c171a9a2853611ce909eba1ad8a4e9b9403bdb8c4c23ebecfbc18741a59ba4c1b5c39a33807353ac7ce9b878232d11393343f5600dca5e830a
SSDEEP 3072:cUOUo2mtynQzFrWYbnnqoUc+DmBoXJ640FuzVvBdz:cUg2mtyQdWinTOt0SBdz
TLSH
T199F3F70175808470F76A0B3049A5E9E5096DED380AE4EADFE3B87E3A5E701D3693356F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\AWork\_drw_main\SetupUE\Release\SetupUE.pdb

kernel32

GetProcAddress LoadLibraryA GetTimeZoneInformation GetLocaleInfoW GetCommandLineW CloseHandle GetModuleHandleW CreateProcessW GetModuleFileNameW LocalFree WriteConsoleW DecodePointer FlushFileBuffers FreeLibrary GetVersionExW WaitForSingleObject GetSystemInfo SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW GetProcessHeap CreateFileW

user32

GetSystemMetrics

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

shell32

CommandLineToArgvW

netapi32

NetWkstaGetInfo NetApiBufferFree

Sharing

General

Malware Config

Signatures

File Explorer

ac1988d394c3337bbf5ef5d5bbbf972ed13d384b392b7acf938c838094520c9f

kernel32

user32

advapi32

shell32

netapi32

generic