2bc26aee26d40cb9e5114dafbfd07bea3f6642a794ed8c846f876b4d4c2423cf

Sharing

Copy URL Twitter E-mail

General

Target
2bc26aee26d40cb9e5114dafbfd07bea3f6642a794ed8c846f876b4d4c2423cf
Size 667KB
Sample240515-vrddgsbb51
SHA256 2bc26aee26d40cb9e5114dafbfd07bea3f6642a794ed8c846f876b4d4c2423cf
MD5 47291cbbc9dfbfb8931b53fab208a049
SHA1 0eb20d4b21a7002b88c0c0fc1c160122daa306da
SHA512 baa0c365861f503ebeffce3aa2f27d572cb5fd00673f1f727c5882b4ab7cdec76123ce39628c3ab20fdafca3a42f8592bef3f294f2ea411a3adde59a43dde155
SSDEEP 12288:U2JhG//t8C5VCFSoDpaQlHfl6mCiWDaBMFCWoCGsq:U2JC/t8iVNoDgQVN6mCiptnX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc26aee26d40cb9e5114dafbfd07bea3f6642a794ed8c846f876b4d4c2423cf

File Explorer

2bc26aee26d40cb9e5114dafbfd07bea3f6642a794ed8c846f876b4d4c2423cf

.exe 667KB

2bc26aee26d40cb9e5114dafbfd07bea3f6642a794ed8c846f876b4d4c2423cf

IMPHASH beb5959bb1e83e2e3f4789da7e63bdcd
SHA256 2bc26aee26d40cb9e5114dafbfd07bea3f6642a794ed8c846f876b4d4c2423cf
MD5 47291cbbc9dfbfb8931b53fab208a049
SHA1 0eb20d4b21a7002b88c0c0fc1c160122daa306da
SHA512 baa0c365861f503ebeffce3aa2f27d572cb5fd00673f1f727c5882b4ab7cdec76123ce39628c3ab20fdafca3a42f8592bef3f294f2ea411a3adde59a43dde155
SSDEEP 12288:U2JhG//t8C5VCFSoDpaQlHfl6mCiWDaBMFCWoCGsq:U2JC/t8iVNoDgQVN6mCiptnX
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\DODO\Videos\TwoStageSearch\TwoStageSearch\TwoStageSearch\Release\TwoStageSearch.pdb

kernel32

Sleep GetExitCodeProcess ReadFile CreateFileW GetTempPathW GetFileSizeEx GetLastError GetCurrentDirectoryW GetProcAddress VirtualAlloc FindClose SetCurrentDirectoryW FindNextFileW CloseHandle DeleteFileW FlushFileBuffers GetFullPathNameA WriteConsoleW CreateProcessW WaitForSingleObject ReadConsoleW SetEndOfFile GetTimeZoneInformation SetStdHandle RtlUnwind HeapReAlloc OutputDebugStringW LoadLibraryExW FreeLibrary SetConsoleCtrlHandler SetFilePointerEx GetConsoleMode GetConsoleCP LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LoadLibraryW GetStringTypeW SetEnvironmentVariableW LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter DeleteCriticalSection RaiseException GetFileAttributesExW CreateSemaphoreW GetTickCount GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess CreateEventW InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter GetFullPathNameW PeekNamedPipe GetFileType GetFileInformationByHandle FileTimeToLocalFileTime HeapSize GetModuleFileNameW WriteFile GetStdHandle AreFileApisANSI GetModuleHandleExW ExitProcess GetProcessHeap WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId GetModuleHandleW GetLocaleInfoW FindFirstFileExW GetLogicalDriveStringsW GetEnvironmentVariableW GetCurrentThread SetLastError GetCPInfo GetOEMCP SetFilePointer FindFirstFileW CreateFileA GetTempFileNameW FatalAppExitA GetACP IsValidCodePage GetCommandLineW HeapFree HeapAlloc EncodePointer DecodePointer GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime IsDebuggerPresent IsProcessorFeaturePresent SetEnvironmentVariableA

user32

EndPaint ClientToScreen DestroyWindow GetWindowTextLengthW TranslateAcceleratorW ScreenToClient GetWindowRect SetActiveWindow GetMessageW SendInput PostQuitMessage SetKeyboardState GetKeyState GetSubMenu GetFocus DialogBoxParamW GetParent LoadCursorW GetClipCursor FindWindowW GetClientRect SetFocus BeginPaint wsprintfW TranslateMessage LoadAcceleratorsW GetKeyboardState GetMenu RegisterClassExW OffsetRect GetAsyncKeyState MessageBoxA SetCursorPos LoadMenuW GetAncestor GetWindowTextW PeekMessageW GetDlgItem EndDialog GetDesktopWindow GetCursorPos LoadStringW EnumChildWindows ShowWindow SetMenu GetSysColorBrush LoadBitmapW CreateDialogParamW FindWindowExW ClipCursor CreateWindowExW SetMenuDefaultItem MessageBoxW GetComboBoxInfo GetSystemMetrics IsWindowVisible SendMessageW UpdateWindow GetDlgCtrlID SetWindowTextW DefWindowProcW CopyRect GetWindow MoveWindow DispatchMessageW LoadIconW

gdi32

CreateFontW DeleteObject

advapi32

CryptAcquireContextA

shell32

ShellExecuteW SHOpenWithDialog ShellExecuteExW

comctl32

ord413 ImageList_Add ImageList_Create ord410

shlwapi

ord191 PathMatchSpecW

Sharing

General

Malware Config

Signatures

File Explorer

2bc26aee26d40cb9e5114dafbfd07bea3f6642a794ed8c846f876b4d4c2423cf

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

generic