4a0b10d72d1b338337edfaef3ce2ccd0b4c48e1138afbdd410e3d9feb6af1978[.]exe

General

Target
4a0b10d72d1b338337edfaef3ce2ccd0b4c48e1138afbdd410e3d9feb6af1978.exe
Size 156KB
Sample260131-jyfxeadv2e
SHA256 4a0b10d72d1b338337edfaef3ce2ccd0b4c48e1138afbdd410e3d9feb6af1978
MD5 6d3a1ceacb1a62e9b7fe1415c7fa041c
SHA1 84f5285426ceb14b5948f7902e7689938ed7f245
SHA512 37ac7c6bdcbf589ff4759a42af303869385b1bd5da57001042c15769c12e67f743aa83f049fb9fb410ebac454f8edb27b399fc3bad0a94c576897d664357a5d7
SSDEEP 3072:QtdC4rFcFbux44OALpJmI03bOskb4pzJ6UaSkgzCk3WsxlU5UkyCj:QtdDpJmIgJFIIkgzcUq
TLSH
T122F36C17B3A500BBE4739239C9A30A42E772781657619BEF03A047756F673E09D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a0b10d72d1b338337edfaef3ce2ccd0b4c48e1138afbdd410e3d9feb6af1978.exe

File Explorer

4a0b10d72d1b338337edfaef3ce2ccd0b4c48e1138afbdd410e3d9feb6af1978.exe

.dll 156KB

4a0b10d72d1b338337edfaef3ce2ccd0b4c48e1138afbdd410e3d9feb6af1978.exe

IMPHASH f9f0e87ecf133996a285a6a9b5271211
SHA256 4a0b10d72d1b338337edfaef3ce2ccd0b4c48e1138afbdd410e3d9feb6af1978
MD5 6d3a1ceacb1a62e9b7fe1415c7fa041c
SHA1 84f5285426ceb14b5948f7902e7689938ed7f245
SHA512 37ac7c6bdcbf589ff4759a42af303869385b1bd5da57001042c15769c12e67f743aa83f049fb9fb410ebac454f8edb27b399fc3bad0a94c576897d664357a5d7
SSDEEP 3072:QtdC4rFcFbux44OALpJmI03bOskb4pzJ6UaSkgzCk3WsxlU5UkyCj:QtdDpJmIgJFIIkgzcUq
TLSH
T122F36C17B3A500BBE4739239C9A30A42E772781657619BEF03A047756F673E09D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

15556

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Tomero\Pictures\StaticlibProj\x64\Release\StaticlibProj.pdb

winhttp

WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpCloseHandle WinHttpOpen

kernel32

CreateFileW GetConsoleMode WriteConsoleW WriteFile Sleep GetComputerNameA CreateProcessA CloseHandle FlushFileBuffers GetConsoleOutputCP GetModuleFileNameW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap GetStringTypeW SetFilePointerEx SetStdHandle HeapSize HeapReAlloc

advapi32

GetUserNameA

Name

.text

Size

97KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4a0b10d72d1b338337edfaef3ce2ccd0b4c48e1138afbdd410e3d9feb6af1978.exe

winhttp

kernel32

advapi32

generic