782aadc761381ec79e8d01a5ed4d13ae6089661ff2517c88e6de6d6eb2c89cab[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
782aadc761381ec79e8d01a5ed4d13ae6089661ff2517c88e6de6d6eb2c89cab.exe
Size 60.3MB
Sample241021-kdkkjaycrm
SHA256 782aadc761381ec79e8d01a5ed4d13ae6089661ff2517c88e6de6d6eb2c89cab
MD5 4ca9cad959d64599e85ecb45232cb8a6
SHA1 17f9e40a0315699e7b7e69397b661d5af66dd871
SHA512 f9598259438c7201927953ea672a3533a4bf800797018c9943e956e0a8dcdfedfa69650bcdff7d451c6785541762921a47cda8f971e078e22f761089acb5b551
SSDEEP 6144:zwWjwzlClutPlVl5ity5wqaSK30qPWXnJITyESp5QohkLKyW+Yah:URMutPlv5lK3WXJuyvzQou+k
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
782aadc761381ec79e8d01a5ed4d13ae6089661ff2517c88e6de6d6eb2c89cab.exe

File Explorer

782aadc761381ec79e8d01a5ed4d13ae6089661ff2517c88e6de6d6eb2c89cab.exe

.dll 60.3MB

782aadc761381ec79e8d01a5ed4d13ae6089661ff2517c88e6de6d6eb2c89cab.exe

IMPHASH 3b347aaa21b3db7b985d65a50a3cfa35
SHA256 782aadc761381ec79e8d01a5ed4d13ae6089661ff2517c88e6de6d6eb2c89cab
MD5 4ca9cad959d64599e85ecb45232cb8a6
SHA1 17f9e40a0315699e7b7e69397b661d5af66dd871
SHA512 f9598259438c7201927953ea672a3533a4bf800797018c9943e956e0a8dcdfedfa69650bcdff7d451c6785541762921a47cda8f971e078e22f761089acb5b551
SSDEEP 6144:zwWjwzlClutPlVl5ity5wqaSK30qPWXnJITyESp5QohkLKyW+Yah:URMutPlv5lK3WXJuyvzQou+k
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

189096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

LocalAlloc GetModuleHandleA GetTempPathA GetLastError LoadLibraryA RaiseException GetLocalTime GetProcAddress LocalFree GetTickCount QueryPerformanceFrequency QueryPerformanceCounter FindClose GetCurrentProcess GetCurrentThread QueueUserAPC ReadFile InitializeCriticalSectionEx WriteFile CreateFileA CloseHandle GetFileSize CreateThread WriteConsoleW GetConsoleOutputCP FlushFileBuffers CreateFileW SetStdHandle GetStringTypeW HeapSize GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar GetCommandLineA GetCommandLineW GetLogicalDrives DeleteCriticalSection GlobalFree GlobalAlloc Sleep InitializeCriticalSection LeaveCriticalSection SetLastError EnterCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW HeapReAlloc LCMapStringW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW RtlUnwindEx RtlPcToFileHeader InterlockedFlushSList EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree SetFilePointerEx GetConsoleMode GetStdHandle GetFileType HeapAlloc WideCharToMultiByte

user32

wsprintfW SendMessageA TranslateMessage UpdateWindow DispatchMessageW ShowWindow LoadAcceleratorsW PostQuitMessage TranslateAcceleratorW RegisterClassExW GetMessageW DefWindowProcW CreateWindowExW

advapi32

CryptGenRandom CryptAcquireContextW CryptEncrypt CryptDecrypt CryptCreateHash CryptDeriveKey CryptHashData CryptDestroyHash CryptReleaseContext

oleaut32

SystemTimeToVariantTime

ws2_32

WSAGetLastError recv send htons connect socket inet_addr WSAStartup WSACleanup closesocket

Name

.text

Size

253KB

Virtual Size

253KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

782aadc761381ec79e8d01a5ed4d13ae6089661ff2517c88e6de6d6eb2c89cab.exe

kernel32

user32

advapi32

oleaut32

ws2_32

generic