8a52a7eb3cdc85598aaabb68f96ddd313a87551da9205233f44ce3267d280ffc

Sharing

Copy URL Twitter E-mail

General

Target
8a52a7eb3cdc85598aaabb68f96ddd313a87551da9205233f44ce3267d280ffc
Size 277KB
Sample231013-dtsgraea88
SHA256 8a52a7eb3cdc85598aaabb68f96ddd313a87551da9205233f44ce3267d280ffc
MD5 84f0becc81f99c3ec4d3a1dad6529ed3
SHA1 dae3c6c1d15789b447faaffbb7de3725b07efe0d
SHA512 11d7f8e1613e4cc46425a5762a0ff697feeadfecf1f69cf1a20f5a2c60e741bc2a6b690ed6698eb56bbf0b3dd68567ce0a125a8963bd269151f409ca1a0e6907
SSDEEP 3072:Ms10kPIoT4pQIw8upMpfznHCQxJDeC9hU62Sr33OzC2VxeNJKkW:5VPIokN9zH7TL3yqT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a52a7eb3cdc85598aaabb68f96ddd313a87551da9205233f44ce3267d280ffc

File Explorer

8a52a7eb3cdc85598aaabb68f96ddd313a87551da9205233f44ce3267d280ffc

.exe 277KB

8a52a7eb3cdc85598aaabb68f96ddd313a87551da9205233f44ce3267d280ffc

IMPHASH d189d43af23bbb5425431a74f9f591c2
SHA256 8a52a7eb3cdc85598aaabb68f96ddd313a87551da9205233f44ce3267d280ffc
MD5 84f0becc81f99c3ec4d3a1dad6529ed3
SHA1 dae3c6c1d15789b447faaffbb7de3725b07efe0d
SHA512 11d7f8e1613e4cc46425a5762a0ff697feeadfecf1f69cf1a20f5a2c60e741bc2a6b690ed6698eb56bbf0b3dd68567ce0a125a8963bd269151f409ca1a0e6907
SSDEEP 3072:Ms10kPIoT4pQIw8upMpfznHCQxJDeC9hU62Sr33OzC2VxeNJKkW:5VPIokN9zH7TL3yqT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13537

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetNumaProcessorNode MoveFileExA SystemTimeToTzSpecificLocalTime InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize SetVolumeMountPointW BackupSeek GetModuleHandleW GetNumberFormatA SetFileTime GetConsoleAliasExesW GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread FatalAppExitW CopyFileW SetConsoleCP GetVolumePathNameA GetStartupInfoW CreateJobObjectA GetHandleInformation GetLastError FindFirstFileW SetLastError EnumSystemCodePagesW LoadLibraryA OpenMutexA GetProcessId LocalAlloc GetFileType IsSystemResumeAutomatic RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA EnumDateFormatsA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW AddConsoleAliasA CreateFileW EnumResourceNamesW GetComputerNameA GetCurrentDirectoryW GetCommandLineW CloseHandle ReadFile HeapFree HeapAlloc GetProcAddress ExitProcess DecodePointer DeleteFileA EncodePointer HeapSetInformation UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapReAlloc SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW IsProcessorFeaturePresent FlushFileBuffers

user32

CharUpperW GetListBoxInfo

gdi32

SelectPalette GetTextFaceW GetCharWidthW

shell32

DragFinish

winhttp

WinHttpWriteData