911d2455d942002e9c94d5e7172cdeca

General

Target
911d2455d942002e9c94d5e7172cdeca
Size 167KB
Sample240205-frl83addaq
SHA256 ebc22543f2bf14b1cbdb51b29ea53a77e87564fff81aaaba2c6c65635de604c6
MD5 911d2455d942002e9c94d5e7172cdeca
SHA1 f92658d7be937a30e0942d15f3bf5a7f259f2fbf
SHA512 0aa8c146ba072caf649df960fe4a64f33d1c52f5436c1340341abafd04842d8668baa75bdec84617be78005166707f5fd6ecdcd64981ba39c300ec75dfdac1f9
SSDEEP 3072:2MjOm9qnHB95FuZfkmlgJY8zh1JgzPKKOAg0Fuj0va7bb:2MqpHHLOfknzh1BAO5bb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
911d2455d942002e9c94d5e7172cdeca

File Explorer

911d2455d942002e9c94d5e7172cdeca

.exe 167KB

911d2455d942002e9c94d5e7172cdeca

IMPHASH 19ea1070373192096f0e028d46396973
SHA256 ebc22543f2bf14b1cbdb51b29ea53a77e87564fff81aaaba2c6c65635de604c6
MD5 911d2455d942002e9c94d5e7172cdeca
SHA1 f92658d7be937a30e0942d15f3bf5a7f259f2fbf
SHA512 0aa8c146ba072caf649df960fe4a64f33d1c52f5436c1340341abafd04842d8668baa75bdec84617be78005166707f5fd6ecdcd64981ba39c300ec75dfdac1f9
SSDEEP 3072:2MjOm9qnHB95FuZfkmlgJY8zh1JgzPKKOAg0Fuj0va7bb:2MqpHHLOfknzh1BAO5bb
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\OriginalPGR\source\repos\ShellCode\Release\ShellCode.pdb

kernel32

VirtualAlloc CreateFileW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

911d2455d942002e9c94d5e7172cdeca

kernel32

generic