83cb5e8b7455fcb3b6c2d45269b08b3ae003dfed4ce8ca942cd007c1ebf17cf2

Sharing

Copy URL Twitter E-mail

General

Target
83cb5e8b7455fcb3b6c2d45269b08b3ae003dfed4ce8ca942cd007c1ebf17cf2
Size 53KB
Sample241023-qsj57ssenh
SHA256 83cb5e8b7455fcb3b6c2d45269b08b3ae003dfed4ce8ca942cd007c1ebf17cf2
MD5 ae0de63d46ce36491a606bd70341a63b
SHA1 1e9d6893ec493e7a0ac565011d3aa31b0de29303
SHA512 cba5b2e08963afb6cdca724cfb6561ac43015c67ef4b3d2de3dbbda9060b7bd70a3bc461cf2e4a3b47ab27b35c30952ac9c7aa8ca0393dbcf9170da065132852
SSDEEP 768:kulvujToXfzMb/V5D2GhR1qNULB7zOzSgYV5lH8oT9To:ku6hR5LcYZ98
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83cb5e8b7455fcb3b6c2d45269b08b3ae003dfed4ce8ca942cd007c1ebf17cf2

File Explorer

83cb5e8b7455fcb3b6c2d45269b08b3ae003dfed4ce8ca942cd007c1ebf17cf2

.exe 53KB

83cb5e8b7455fcb3b6c2d45269b08b3ae003dfed4ce8ca942cd007c1ebf17cf2

IMPHASH 11c39b34a9041b2a68f43cce6fd1b8f0
SHA256 83cb5e8b7455fcb3b6c2d45269b08b3ae003dfed4ce8ca942cd007c1ebf17cf2
MD5 ae0de63d46ce36491a606bd70341a63b
SHA1 1e9d6893ec493e7a0ac565011d3aa31b0de29303
SHA512 cba5b2e08963afb6cdca724cfb6561ac43015c67ef4b3d2de3dbbda9060b7bd70a3bc461cf2e4a3b47ab27b35c30952ac9c7aa8ca0393dbcf9170da065132852
SSDEEP 768:kulvujToXfzMb/V5D2GhR1qNULB7zOzSgYV5lH8oT9To:ku6hR5LcYZ98
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\pc\Desktop\Codes\Ransom\x64\Release\Update.pdb

kernel32

GetLastError GetFileSizeEx RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId RtlCaptureContext

ws2_32

InetPtonW

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z ?good@ios_base@std@@QEBA_NXZ ?_Xlength_error@std@@YAXPEBD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception _CxxThrowException __C_specific_handler __std_exception_copy memcpy __std_exception_destroy __std_terminate memset

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode __stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit exit __p___argv _initterm_e _initterm _seh_filter_exe _initialize_onexit_table _cexit __p___argc _set_app_type _exit _crt_atexit _register_onexit_function _initialize_narrow_environment _configure_narrow_argv terminate _get_initial_narrow_environment _invalid_parameter_noinfo_noreturn

api-ms-win-crt-string-l1-1-0

wcsncmp

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

83cb5e8b7455fcb3b6c2d45269b08b3ae003dfed4ce8ca942cd007c1ebf17cf2

kernel32

ws2_32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic