26e296919547eb0dd41f4dc66ad840f4b14abe91ca3282bd2165ede163dd0a5b
- SHA256 26e296919547eb0dd41f4dc66ad840f4b14abe91ca3282bd2165ede163dd0a5b
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0e71a052082e443d1027c268d81b8071e00660a8fe20e4a5b396878f9ce7523a.exe
Resource
win7-20240508-en
windows7-x64
22 signatures
150 seconds
General
- Target 26e296919547eb0dd41f4dc66ad840f4b14abe91ca3282bd2165ede163dd0a5b
- Size 7.2MB
- Sample240604-bn6fbagb3w
- SHA256 26e296919547eb0dd41f4dc66ad840f4b14abe91ca3282bd2165ede163dd0a5b
- MD5 5146fbc6cac555cc65036f9ec18b635a
- SHA1 2b5755909af68f71392bb5df87ae2e7ca9b35e9c
- SHA512 24e632b2ccea482c20f29828ebe6e3ed397e98439f95c977dec3c65f0b6edf3e7acce8a27c29a77591036ed1ecacebd890dcc029d568821067be77cb548304fa
- SSDEEP 196608:XN90Gc4x7RDCUmCx39dSBK39GgpoZDTd9EnR:X8HY0rC1GK39GgpUwR
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0e71a052082e443d1027c268d81b8071e00660a8fe20e4a5b396878f9ce7523a.exe
File Explorer
-
26e296919547eb0dd41f4dc66ad840f4b14abe91ca3282bd2165ede163dd0a5b.zip 7.2MB
-
0e71a052082e443d1027c268d81b8071e00660a8fe20e4a5b396878f9ce7523a.exe.exe 7.3MB
0e71a052082e443d1027c268d81b8071e00660a8fe20e4a5b396878f9ce7523a.exe
- IMPHASH 3786a4cf8bfee8b4821db03449141df4
- SHA256 0e71a052082e443d1027c268d81b8071e00660a8fe20e4a5b396878f9ce7523a
- MD5 0c9f3e28ab69a267a1fff9fe9ae9f516
- SHA1 1cf6dbc3e6e3ee82254a201dc9c87a12f08c1e31
- SHA512 dc273d9860b8610b338cbfa0c922b7c4a9f6b68308957d2dea0d2124bd659ec0b04781321be3a3f66bc22d02992d8347c386bcceffe6fe49b58ae295e4154a27
- SSDEEP 98304:91OC/3dy4gMqA3Varui/uMoMm1/df1kj+wIL7RyLGLlSjAzfC0SitAnoVB28nXNP:91OCPjobQ/R7we7E3uSvn7e9dkzrrza
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
84740
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
oleaut32
VariantClear
SysAllocString
user32
SendMessageA
SetTimer
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
SetWindowTextW
LoadIconA
LoadStringW
LoadStringA
CharUpperW
CharUpperA
DestroyWindow
EndDialog
PostMessageA
ShowWindow
MessageBoxW
GetDlgItem
KillTimer
SetWindowTextA
shell32
ShellExecuteExA
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetUnhandledExceptionFilter
TlsAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
WaitForSingleObject
CloseHandle
CreateProcessA
SetCurrentDirectoryA
GetCommandLineW
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
GetStdHandle
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
CreateEventA
SetEvent
ResetEvent
InitializeCriticalSection
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
Name
.text
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sxdata
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=25, id=14, version=7299,
count=64, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=95, version=2190,
count=184, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=77, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=7, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,