56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495

General

Target
56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495
Size 467KB
Sample240613-2v69astfpc
SHA256 56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495
MD5 d74e5939e3ad989ab0187c1127f9db3a
SHA1 a2e3697f89cc1c31b4d342dfaddb738f28d420fb
SHA512 47824d39685d4b583099bc907881d30736f3a39b7636baf20dab9d480026f87d0b54031fff6ac369bb053f65cfd1f95e83a5a5d0eed84f82c4b1a440f7d6d218
SSDEEP 12288:4w5ZLCWvqJQL9+l9RBG/w/SWFM57OWCd:4w5Z5qJQLwlvOIP0OW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495

File Explorer

56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495

.exe 467KB

56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495

IMPHASH 9e0bcb4548257af08f006535fb3b92e6
SHA256 56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495
MD5 d74e5939e3ad989ab0187c1127f9db3a
SHA1 a2e3697f89cc1c31b4d342dfaddb738f28d420fb
SHA512 47824d39685d4b583099bc907881d30736f3a39b7636baf20dab9d480026f87d0b54031fff6ac369bb053f65cfd1f95e83a5a5d0eed84f82c4b1a440f7d6d218
SSDEEP 12288:4w5ZLCWvqJQL9+l9RBG/w/SWFM57OWCd:4w5Z5qJQLwlvOIP0OW
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

63003

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

GetTextAlign

user32

CreateCaret

shell32

ExtractIconExA

kernel32

WriteConsoleW HeapSize CreateFileW GetProcessHeap CloseHandle WaitForSingleObject WaitForSingleObjectEx CreateThread VirtualAlloc RaiseException InitOnceBeginInitialize InitOnceComplete GetCurrentThreadId GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess SetStdHandle RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetEndOfFile

Name

.text

Size

191KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

215KB

Virtual Size

218KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495

gdi32

user32

shell32

kernel32

generic