04ff9b53dfa95f70bdc3cac3cc566d9422925b46779b5111a3a33302dc1e5df0

General

Target
04ff9b53dfa95f70bdc3cac3cc566d9422925b46779b5111a3a33302dc1e5df0
Size 188KB
Sample261102-w4lfascv31
SHA256 04ff9b53dfa95f70bdc3cac3cc566d9422925b46779b5111a3a33302dc1e5df0
MD5 846d9ed14832790681610633c72536a9
SHA1 c4c35a265e5042134c7c95cacdcc8ede01baa78e
SHA512 4cb42a4485aedd736c22b259ceabad48fef4497055f556537a9e68172a6b4f28f1c32db42ba0959c3c92378163923e84b679508845353d452812deffa543f3bb
SSDEEP 1536:QqHf3Xw+gcNqg+s50nEPbX7f4eJaZ6w3CZdup7qd4xvEhK0Pu3TYb:pHf3gmN+sbPbX7f4eJG6w3Cap7GrIU
TLSH
T17E148B5263FA4204FAF37F7499B812A56F3A7C65AF38C58F11A1405C89F2E909D70B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04ff9b53dfa95f70bdc3cac3cc566d9422925b46779b5111a3a33302dc1e5df0

File Explorer

04ff9b53dfa95f70bdc3cac3cc566d9422925b46779b5111a3a33302dc1e5df0

.exe 188KB

04ff9b53dfa95f70bdc3cac3cc566d9422925b46779b5111a3a33302dc1e5df0

IMPHASH 7ea226efe96235b6e6f766c4503442c4
SHA256 04ff9b53dfa95f70bdc3cac3cc566d9422925b46779b5111a3a33302dc1e5df0
MD5 846d9ed14832790681610633c72536a9
SHA1 c4c35a265e5042134c7c95cacdcc8ede01baa78e
SHA512 4cb42a4485aedd736c22b259ceabad48fef4497055f556537a9e68172a6b4f28f1c32db42ba0959c3c92378163923e84b679508845353d452812deffa543f3bb
SSDEEP 1536:QqHf3Xw+gcNqg+s50nEPbX7f4eJaZ6w3CZdup7qd4xvEhK0Pu3TYb:pHf3gmN+sbPbX7f4eJG6w3Cap7GrIU
TLSH
T17E148B5263FA4204FAF37F7499B812A56F3A7C65AF38C58F11A1405C89F2E909D70B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

CharUpperBuffW LoadStringW

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wfopen _wsplitpath _wtol exit fclose feof fgetws free fwrite getenv malloc memcpy memmove memset strchr strcmp strcpy strcspn strlen toupper wcschr wcscpy wcslen wcsrchr wcsstr

kernel32

CloseHandle CompareFileTime CompareStringW CopyFileW CreateDirectoryW CreateFileW FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FormatMessageW GetCommandLineW GetCurrentDirectoryW GetDateFormatW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileTime GetFullPathNameW GetModuleHandleW GetOEMCP GetProcAddress GetStdHandle GetTickCount GetTimeFormatW HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW LocalFree ReadFile SetFileAttributesW SystemTimeToFileTime WideCharToMultiByte WriteConsoleW WriteFile lstrcmpW

ntdll

_chkstk _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

04ff9b53dfa95f70bdc3cac3cc566d9422925b46779b5111a3a33302dc1e5df0

user32

ucrtbase

kernel32

ntdll

generic