13c8260628b7f7c3784b50e4b55d90cf

General

Target
13c8260628b7f7c3784b50e4b55d90cf
Size 382KB
Sample231230-kspg2adacq
SHA256 ce316f40f22056157cc46f9b13a7c22e1f7b8a911106196c61f62654bd12e698
MD5 13c8260628b7f7c3784b50e4b55d90cf
SHA1 83f7bb6359272da45a41ea6d59e608bc8028b55e
SHA512 debda761b8977f8a07c4cdf1dab1b6063d50501a6e6099de8d19a82b0ee2d94473648aeb93fa817e2d5c76fefffcbe14f26d48d036be4ab0fac8481df8e36c68
SSDEEP 6144:KAIoDdOTEuVzN6qw4jkwyjGaKvrvgtzzNcVWq7XKF:8oZOTEuVp6q2wy3Q2zOA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13c8260628b7f7c3784b50e4b55d90cf

File Explorer

13c8260628b7f7c3784b50e4b55d90cf

.exe 382KB

13c8260628b7f7c3784b50e4b55d90cf

IMPHASH 57bb9b4b2dab4ca0a9a9d0cdae0c89c2
SHA256 ce316f40f22056157cc46f9b13a7c22e1f7b8a911106196c61f62654bd12e698
MD5 13c8260628b7f7c3784b50e4b55d90cf
SHA1 83f7bb6359272da45a41ea6d59e608bc8028b55e
SHA512 debda761b8977f8a07c4cdf1dab1b6063d50501a6e6099de8d19a82b0ee2d94473648aeb93fa817e2d5c76fefffcbe14f26d48d036be4ab0fac8481df8e36c68
SSDEEP 6144:KAIoDdOTEuVzN6qw4jkwyjGaKvrvgtzzNcVWq7XKF:8oZOTEuVp6q2wy3Q2zOA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize GetNativeSystemInfo SetFilePointer GetConsoleAliasesLengthW CopyFileExW SetLocalTime GetConsoleAliasExesLengthA InterlockedIncrement VerSetConditionMask GetCommState InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW SetEnvironmentVariableW GlobalLock SetConsoleScreenBufferSize WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA VirtualFree SetProcessPriorityBoost FindResourceExA GetComputerNameExA CreateSemaphoreA GetFileAttributesW GetBinaryTypeA ReadFile UnregisterWait CompareStringW lstrlenW InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW OpenMutexW GetCurrentDirectoryW GetProcAddress CreateNamedPipeA WriteProfileSectionA ReadFileEx SetStdHandle DisableThreadLibraryCalls GetPrivateProfileStringA LoadLibraryA GetConsoleScreenBufferInfo LocalAlloc FindAtomA EnumResourceNamesA WriteProfileStringW FatalAppExitA GetVersionExA TlsAlloc DeleteFileW LCMapStringW AreFileApisANSI GetOverlappedResult GetComputerNameA GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetHandleCount GetStdHandle GetFileType TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA GetModuleHandleA

gdi32

GetBoundsRect

winhttp

WinHttpOpen

Name

.text

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

112KB

Virtual Size

46.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

81KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

13c8260628b7f7c3784b50e4b55d90cf

kernel32

gdi32

winhttp

generic