a79719c562731058f1bd8c29f2329ae14e43ef4ba0786a62b9055eaf1586d068

Sharing

Copy URL Twitter E-mail

General

Target
a79719c562731058f1bd8c29f2329ae14e43ef4ba0786a62b9055eaf1586d068
Size 94KB
Sample240510-bng3qaac4w
SHA256 a79719c562731058f1bd8c29f2329ae14e43ef4ba0786a62b9055eaf1586d068
MD5 cc2e5ccfb3cb1fdab5061eb5edd3a543
SHA1 355a344cc5b724447756c144d859f640cf813bc6
SHA512 1504ee226a3d35dbc277255462603ab8f0808e8ddfe859d4fdbb82be950763489606081fdfb66ea721cee08a1cdd30ef26393fd2c4ad6cfd0aa1a390d12ae3af
SSDEEP 1536:skPjmPwvx3PtLBzGMlGO+eo+zCj4CFgjASG3KazRZICrWaGZh7LLx3:skLmuftLBzfIOz4VSGaqJrWNZ1Lx3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a79719c562731058f1bd8c29f2329ae14e43ef4ba0786a62b9055eaf1586d068

File Explorer

a79719c562731058f1bd8c29f2329ae14e43ef4ba0786a62b9055eaf1586d068

.exe 94KB

a79719c562731058f1bd8c29f2329ae14e43ef4ba0786a62b9055eaf1586d068

IMPHASH eeb4da0b88bd25de6080e26f39a38b83
SHA256 a79719c562731058f1bd8c29f2329ae14e43ef4ba0786a62b9055eaf1586d068
MD5 cc2e5ccfb3cb1fdab5061eb5edd3a543
SHA1 355a344cc5b724447756c144d859f640cf813bc6
SHA512 1504ee226a3d35dbc277255462603ab8f0808e8ddfe859d4fdbb82be950763489606081fdfb66ea721cee08a1cdd30ef26393fd2c4ad6cfd0aa1a390d12ae3af
SSDEEP 1536:skPjmPwvx3PtLBzGMlGO+eo+zCj4CFgjASG3KazRZICrWaGZh7LLx3:skLmuftLBzfIOz4VSGaqJrWNZ1Lx3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13569

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\C8\Desktop\rifle\Release\rifle.pdb

ws2_32

closesocket gethostbyname gethostname connect WSAStartup WSAGetLastError htons WSACleanup recv socket send

wininet

DeleteUrlCacheEntry

advapi32

RegOpenKeyA GetUserNameA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegCloseKey

urlmon

URLOpenBlockingStreamA

shell32

ShellExecuteA

user32

wsprintfA

kernel32

HeapSize IsProcessorFeaturePresent RtlUnwind SetStdHandle WriteConsoleW CreateFileW FlushFileBuffers CompareStringW SetEnvironmentVariableA IsDebuggerPresent GetStringTypeW LoadLibraryW ExitProcess CreateFileA GetFileSize HeapAlloc HeapFree WaitForSingleObject GetTickCount GetProcessHeap WriteFile GetCommandLineA GlobalAlloc Sleep CreateProcessA ReadFile lstrcatA CreateDirectoryA SetCurrentDirectoryA GetLastError CreatePipe GetModuleFileNameA GetVersionExA WinExec CloseHandle GetTempPathA lstrcpyA HeapReAlloc GetSystemTimeAsFileTime HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter DecodePointer EncodePointer GetProcAddress GetModuleHandleW GetStdHandle GetModuleFileNameW HeapCreate GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId WideCharToMultiByte LCMapStringW MultiByteToWideChar GetTimeZoneInformation RaiseException FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection

Sharing

General

Malware Config

Signatures

File Explorer

a79719c562731058f1bd8c29f2329ae14e43ef4ba0786a62b9055eaf1586d068

ws2_32

wininet

advapi32

urlmon

shell32

user32

kernel32

generic