20726aa7abe0fbd2c504ce3edd52a1d40df118ff4971ba72cc1c9abf8a08a45a

General

Target
20726aa7abe0fbd2c504ce3edd52a1d40df118ff4971ba72cc1c9abf8a08a45a
Size 758KB
Sample261110-mcxvkshv3k
SHA256 20726aa7abe0fbd2c504ce3edd52a1d40df118ff4971ba72cc1c9abf8a08a45a
MD5 7c079de4e07b66861d3713074451120e
SHA1 939b5fec8bdf0576d653fdb4c0d8c4570784b902
SHA512 2b62c36aa4f6b517cf264688a1ceba2185cefcc79fb38a65ca4afee3c6ce9ddcc84e1649152cb71965cf3a7d5ee8aba123f892acdef8c10e8aa9896103493a90
SSDEEP 12288:zl23+WQvnUI491xx4HIT4ZHg049B10+A+sI1QrPhVLmYFpUJzpEUixQ5RZp0eUMY:03+Wo4QrLLjpbtm5XpZFZAl/z2tLy/P
TLSH
T11EF45B0ABAA810F9E077D13888976656FBB1B8560B3097CF53A0065E6F37BE09D3D711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20726aa7abe0fbd2c504ce3edd52a1d40df118ff4971ba72cc1c9abf8a08a45a

File Explorer

20726aa7abe0fbd2c504ce3edd52a1d40df118ff4971ba72cc1c9abf8a08a45a

.exe 758KB

20726aa7abe0fbd2c504ce3edd52a1d40df118ff4971ba72cc1c9abf8a08a45a

IMPHASH 18a2dfb3a8ff6653c6b9c447ecc9f907
SHA256 20726aa7abe0fbd2c504ce3edd52a1d40df118ff4971ba72cc1c9abf8a08a45a
MD5 7c079de4e07b66861d3713074451120e
SHA1 939b5fec8bdf0576d653fdb4c0d8c4570784b902
SHA512 2b62c36aa4f6b517cf264688a1ceba2185cefcc79fb38a65ca4afee3c6ce9ddcc84e1649152cb71965cf3a7d5ee8aba123f892acdef8c10e8aa9896103493a90
SSDEEP 12288:zl23+WQvnUI491xx4HIT4ZHg049B10+A+sI1QrPhVLmYFpUJzpEUixQ5RZp0eUMY:03+Wo4QrLLjpbtm5XpZFZAl/z2tLy/P
TLSH
T11EF45B0ABAA810F9E077D13888976656FBB1B8560B3097CF53A0065E6F37BE09D3D711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

223860

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetFileAttributesW WriteFile CloseHandle GetModuleFileNameW GetLastError SetLastError WaitForSingleObject Sleep GetCurrentProcessId TerminateProcess CreateThread CreateRemoteThread GetExitCodeThread CreateProcessW GetFileAttributesExW VirtualAllocEx VirtualFreeEx WriteProcessMemory GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Process32FirstW Process32NextW ReadFile OutputDebugStringW SetNamedPipeHandleState WaitNamedPipeW GetTickCount GetFileAttributesW DeleteFileW OpenProcess CreateFileW FlushFileBuffers WriteConsoleW WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx HeapFree GetCommandLineW HeapAlloc GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW IsProcessorFeaturePresent GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize GetCurrentThreadId IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetProcessHeap GetStdHandle GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc GetTimeZoneInformation LoadLibraryExW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle SetEnvironmentVariableA

advapi32

SetServiceStatus RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW

shell32

SHCreateDirectoryExW

Sharing

General

Malware Config

Signatures

File Explorer

20726aa7abe0fbd2c504ce3edd52a1d40df118ff4971ba72cc1c9abf8a08a45a

kernel32

advapi32

shell32

generic