77f92845-ea64-4ac0-a519-380[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
77f92845-ea64-4ac0-a519-380.exe
Size 26.7MB
Sample260508-jwypfaev7w
SHA256 04207145a77f87c31f42cb4256604e00f439cf6c83335899bacf1b29abcad651
MD5 2a10a27b5722652b5a36891ea59ab3f8
SHA1 7458db2a1ca69f8fd95b77bb8a7b6e787c682575
SHA512 19367e666d3a0fd0f9282a08c87a6aa338ad65fbcc0698afb8815da990c786abe5b1109a3bebc1375518612ea26acb840bd3ad37bd6b6eee2e2b0ab4fb8b3417
SSDEEP 786432:dxiO7dXGRUy5uthqUN70a+oN4NHdEvuk/NF:/PxthzjN4Ncuk/H
TLSH
T11C5723E134C552E4EBE74921938F13AE60C27A7257DA681A76D01C034B30DFB7A47EA7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77f92845-ea64-4ac0-a519-380.exe

File Explorer

77f92845-ea64-4ac0-a519-380.exe

.exe 26.7MB

77f92845-ea64-4ac0-a519-380.exe

IMPHASH 1532586de4cee67c91f59fe5b0f22087
SHA256 04207145a77f87c31f42cb4256604e00f439cf6c83335899bacf1b29abcad651
MD5 2a10a27b5722652b5a36891ea59ab3f8
SHA1 7458db2a1ca69f8fd95b77bb8a7b6e787c682575
SHA512 19367e666d3a0fd0f9282a08c87a6aa338ad65fbcc0698afb8815da990c786abe5b1109a3bebc1375518612ea26acb840bd3ad37bd6b6eee2e2b0ab4fb8b3417
SSDEEP 786432:dxiO7dXGRUy5uthqUN70a+oN4NHdEvuk/NF:/PxthzjN4Ncuk/H
TLSH
T11C5723E134C552E4EBE74921938F13AE60C27A7257DA681A76D01C034B30DFB7A47EA7
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

49037795

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

AddDllDirectory GetSystemTimeAsFileTime HeapAlloc HeapFree ExitProcess LoadLibraryA GetModuleHandleA GetProcAddress

user32

SetCapture

advapi32

PrivilegeCheck

shell32

ShellExecuteA

ole32

CoUninitialize

winhttp

WinHttpConnect

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCompositionWindow

ws2_32

sendto

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

setupapi

SetupDiDestroyDeviceInfoList

urlmon

URLDownloadToFileA

ncrypt

NCryptGetProperty

crypt32

PFXImportCertStore

ntdll

NtUnloadDriver

iphlpapi

GetAdaptersAddresses

shlwapi

PathFindFileNameW

psapi

GetModuleInformation

wintrust

WinVerifyTrust

dnsapi

DnsFree

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-convert-l1-1-0

atoll

api-ms-win-crt-runtime-l1-1-0

__sys_nerr

api-ms-win-crt-time-l1-1-0

_difftime64

api-ms-win-crt-string-l1-1-0

_stricmp

api-ms-win-crt-math-l1-1-0

atan2f

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_locale_name_func

api-ms-win-crt-multibyte-l1-1-0

_mbsicmp

api-ms-win-crt-environment-l1-1-0

getenv

Name

.text

Size

Virtual Size

9.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

528KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

538KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.2929292

Size

Virtual Size

17.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.2929292

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.2929292

Size

26.7MB

Virtual Size

26.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

292B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

77f92845-ea64-4ac0-a519-380.exe

d3d11

d3dcompiler_43

kernel32

user32

advapi32

shell32

ole32

winhttp

dwmapi

imm32

ws2_32

msvcp140

d3dx11_43

setupapi

urlmon

ncrypt

crypt32

ntdll

iphlpapi

shlwapi

psapi

wintrust

dnsapi

userenv

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic