24585201665e873baf342f7bb7a2670da26ab0a8792cd75f573025d9bc81251f

Sharing

Copy URL Twitter E-mail

General

Target
24585201665e873baf342f7bb7a2670da26ab0a8792cd75f573025d9bc81251f
Size 156KB
Sample231012-knglmabe44
SHA256 24585201665e873baf342f7bb7a2670da26ab0a8792cd75f573025d9bc81251f
MD5 14ce02ec338547701774bde9596a93e9
SHA1 f996efcfffa596f7f8b69502ca993e143fcffe8f
SHA512 6d39eede7efef974a928f41c09e9b098431c6a1a5c1eab79976c4ef1076a3abd28a58892a1689edbeb046ad249bf0726201554dfdb27a9fe1ec4706dd43bbd53
SSDEEP 1536:iRxAIUW/s+UweBuJyrkXrfOMq8stVY9GzkyEFeDhOP7+tQhUHT6CBZHGGWdsH9Q7:iP3UWw3KbA2XFegit5HTNBZGmu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24585201665e873baf342f7bb7a2670da26ab0a8792cd75f573025d9bc81251f

File Explorer

24585201665e873baf342f7bb7a2670da26ab0a8792cd75f573025d9bc81251f

.exe 156KB

24585201665e873baf342f7bb7a2670da26ab0a8792cd75f573025d9bc81251f

IMPHASH 11e88c9142f4056ed9a74e1fa9f4a6a5
SHA256 24585201665e873baf342f7bb7a2670da26ab0a8792cd75f573025d9bc81251f
MD5 14ce02ec338547701774bde9596a93e9
SHA1 f996efcfffa596f7f8b69502ca993e143fcffe8f
SHA512 6d39eede7efef974a928f41c09e9b098431c6a1a5c1eab79976c4ef1076a3abd28a58892a1689edbeb046ad249bf0726201554dfdb27a9fe1ec4706dd43bbd53
SSDEEP 1536:iRxAIUW/s+UweBuJyrkXrfOMq8stVY9GzkyEFeDhOP7+tQhUHT6CBZHGGWdsH9Q7:iP3UWw3KbA2XFegit5HTNBZGmu
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

111884

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReleaseMutex ReleaseSRWLockShared GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee AcquireSRWLockExclusive GetCurrentProcess GetCurrentThread RtlCaptureContext GetProcAddress RtlLookupFunctionEntry SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetStdHandle GetCurrentProcessId WaitForSingleObject TryAcquireSRWLockExclusive QueryPerformanceCounter HeapAlloc GetProcessHeap HeapFree HeapReAlloc WaitForSingleObjectEx LoadLibraryA CreateMutexA GetModuleHandleA GetConsoleMode GetModuleHandleW FormatMessageW MultiByteToWideChar WriteConsoleW TlsGetValue TlsSetValue GetSystemTimeAsFileTime ReleaseSRWLockExclusive AcquireSRWLockShared CloseHandle SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind InitializeSListHead GetCurrentThreadId IsProcessorFeaturePresent

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

_CxxThrowException memcmp memset memcpy __CxxFrameHandler3 __current_exception_context __C_specific_handler __current_exception memmove

api-ms-win-crt-runtime-l1-1-0

_initterm_e exit _exit _initterm __p___argc __p___argv _get_initial_narrow_environment _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe _register_onexit_function _crt_atexit terminate _cexit _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free