922d3b88f96c3d714ffa416ad5622f0c

Sharing

Copy URL Twitter E-mail

General

Target
922d3b88f96c3d714ffa416ad5622f0c
Size 313KB
Sample240205-rb8b5shdb7
SHA256 44dedf5b594d812b996aae7b28fd3489703842b05ff917403f879d728fe15ba0
MD5 922d3b88f96c3d714ffa416ad5622f0c
SHA1 0e88de8bd426fa388be3f56aaeafc9c542398353
SHA512 5fa286189485789c9cadc70429ba8dd307716acc2b11e9c6213e6f929d85de4cae81184f29d68fafd20e5250e28455dfc3b915e7b7383c4dc9a20e480d2971b3
SSDEEP 6144:yGEpIphQKVeA/8kApP9Jn73GTrdHqZ13989j0yF20ETHFCRgJ:xEp1JKTrdHq3yw0sH8Rw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
922d3b88f96c3d714ffa416ad5622f0c

File Explorer

922d3b88f96c3d714ffa416ad5622f0c

.exe 313KB

922d3b88f96c3d714ffa416ad5622f0c

IMPHASH 8192ad9092bb7c35b80a363805f4aba0
SHA256 44dedf5b594d812b996aae7b28fd3489703842b05ff917403f879d728fe15ba0
MD5 922d3b88f96c3d714ffa416ad5622f0c
SHA1 0e88de8bd426fa388be3f56aaeafc9c542398353
SHA512 5fa286189485789c9cadc70429ba8dd307716acc2b11e9c6213e6f929d85de4cae81184f29d68fafd20e5250e28455dfc3b915e7b7383c4dc9a20e480d2971b3
SSDEEP 6144:yGEpIphQKVeA/8kApP9Jn73GTrdHqZ13989j0yF20ETHFCRgJ:xEp1JKTrdHq3yw0sH8Rw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xampp\htdocs\Loct\1cd201383aa24234931c7154bc5ae095\Loader\Project1\Release\Project1.pdb

kernel32

CloseHandle VirtualProtect CreateFileMappingW MapViewOfFile UnmapViewOfFile lstrcmpW GetFullPathNameW MultiByteToWideChar GetUserDefaultLCID DecodePointer WriteConsoleW GetFileSize CreateFileW lstrcatW GetCommandLineW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW RaiseException

user32

GetDC GrayStringW

advapi32

RegOpenKeyW RegCloseKey RegQueryValueW

shell32

CommandLineToArgvW

ole32

CoInitialize CLSIDFromProgID CoUninitialize CoCreateInstance

oleaut32

LoadTypeLi SysFreeString SysAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

922d3b88f96c3d714ffa416ad5622f0c

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic