940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0

Sharing

Copy URL Twitter E-mail

General

Target
940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0
Size 1.5MB
Sample231004-ffsxgaba76
SHA256 940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0
MD5 7aa2d4005c0688fbb8c3ff8f1ad2f898
SHA1 789b429372d9eec386382a1893efb56a52890d5d
SHA512 4dd6ce4903a33ab1a8fc4a2a8e3467833b1ad60573e0ce0da250526c96f06180b52b4147e1f155c8833c082f49af04e25fff7e1f6bdea73f24ea6a118ae6e18f
SSDEEP 12288:4ruH7lpvsJws5ZcmuLVc9X6a9Dhvh/nIUvmlG9bj:4rGldsJwh46a9DhvhAUvU4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0

File Explorer

940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0

.exe 1.5MB

940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0

IMPHASH 0019c5cc9dc02122ed11385f5bfdf094
SHA256 940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0
MD5 7aa2d4005c0688fbb8c3ff8f1ad2f898
SHA1 789b429372d9eec386382a1893efb56a52890d5d
SHA512 4dd6ce4903a33ab1a8fc4a2a8e3467833b1ad60573e0ce0da250526c96f06180b52b4147e1f155c8833c082f49af04e25fff7e1f6bdea73f24ea6a118ae6e18f
SSDEEP 12288:4ruH7lpvsJws5ZcmuLVc9X6a9Dhvh/nIUvmlG9bj:4rGldsJwh46a9DhvhAUvU4
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetClipCursor

ole32

CoGetApartmentType CoGetObjectContext

advapi32

RegDisablePredefinedCacheEx

kernel32

ReadConsoleW ReadFile CreateFileW WriteConsoleW CreateEventW FreeConsole RaiseException CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW FormatMessageA InitOnceBeginInitialize InitOnceComplete GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW RtlCaptureStackBackTrace IsProcessorFeaturePresent QueryPerformanceCounter QueryPerformanceFrequency LocalFree GetLocaleInfoEx SetFileInformationByHandle GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx InitOnceExecuteOnce SleepConditionVariableCS CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetProcAddress GetFileInformationByHandleEx CreateSymbolicLinkW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount SetEvent ResetEvent DecodePointer IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead HeapReAlloc RtlUnwind InterlockedPushEntrySList InterlockedFlushSList SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread SetConsoleCtrlHandler HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap OutputDebugStringW SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize

Name

.text

Size

494KB

Virtual Size

493KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

756KB

Virtual Size

755KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

288KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ