c766683e30611b6cc33146b9e07abd40098e8b4eaa9cbd56000d09fc0d4c0bad

General

Target
c766683e30611b6cc33146b9e07abd40098e8b4eaa9cbd56000d09fc0d4c0bad
Size 241KB
Sample240719-tft2essdrd
SHA256 c766683e30611b6cc33146b9e07abd40098e8b4eaa9cbd56000d09fc0d4c0bad
MD5 d4dff9002d98aad6dcf1dbce5548ba95
SHA1 604066e0ee49be556ebbed8895122c323de8d8f0
SHA512 f6c2f5d32e9f2b6ef0a68f61a7b1a590455d9eee9b79eb18724c1e76067a89a29947a85afbd0da8b64fa9d13c57d348774d4069301fb9294075e9e9a6605098b
SSDEEP 3072:kexpTQsx4c5E5czyy7dPHEXKdb4omagrooGqpWSPup2fRdyQ/ajtgNiA:ke7xDeSy8dPkXKNmRrooGqULIXpE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c766683e30611b6cc33146b9e07abd40098e8b4eaa9cbd56000d09fc0d4c0bad

File Explorer

c766683e30611b6cc33146b9e07abd40098e8b4eaa9cbd56000d09fc0d4c0bad

.exe 241KB

c766683e30611b6cc33146b9e07abd40098e8b4eaa9cbd56000d09fc0d4c0bad

IMPHASH 9939b7637333f09fd7c0070786cd743f
SHA256 c766683e30611b6cc33146b9e07abd40098e8b4eaa9cbd56000d09fc0d4c0bad
MD5 d4dff9002d98aad6dcf1dbce5548ba95
SHA1 604066e0ee49be556ebbed8895122c323de8d8f0
SHA512 f6c2f5d32e9f2b6ef0a68f61a7b1a590455d9eee9b79eb18724c1e76067a89a29947a85afbd0da8b64fa9d13c57d348774d4069301fb9294075e9e9a6605098b
SSDEEP 3072:kexpTQsx4c5E5czyy7dPHEXKdb4omagrooGqpWSPup2fRdyQ/ajtgNiA:ke7xDeSy8dPkXKNmRrooGqULIXpE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19909

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadHugeReadPtr SetEndOfFile LocalCompact CreateHardLinkA GetModuleHandleW GetCurrentThread GetProcessHeap EnumResourceTypesA GlobalAlloc GetSystemDirectoryW LoadLibraryW IsProcessInJob AssignProcessToJobObject IsBadWritePtr GetLastError SetLastError GetProcAddress VerLanguageNameA FindClose LoadLibraryA SetConsoleCtrlHandler AddAtomW CreateEventW HeapWalk GlobalHandle GetModuleFileNameA GetOEMCP GlobalUnWire EnumResourceNamesA PeekConsoleInputA Module32NextW GetDiskFreeSpaceExW CreateFileW SetStdHandle WriteConsoleW SetFilePointer HeapReAlloc IsValidLocale EnumSystemLocalesA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent HeapCreate ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA CloseHandle

user32

GetMessageExtraInfo CharUpperBuffA GetCursorPos SetMenu SetCaretPos GetCaretBlinkTime SetClipboardViewer

Name

.text

Size

146KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

47KB

Virtual Size

28.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mokuve

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jeve

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sigupos

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c766683e30611b6cc33146b9e07abd40098e8b4eaa9cbd56000d09fc0d4c0bad

kernel32

user32

generic