b92ba45a120d3b011cd7621f5dd4b088ed9d573c586fd0e2cd8f18918265977b

General

Target
b92ba45a120d3b011cd7621f5dd4b088ed9d573c586fd0e2cd8f18918265977b
Size 147KB
Sample260604-z2bpvsft2w
SHA256 b92ba45a120d3b011cd7621f5dd4b088ed9d573c586fd0e2cd8f18918265977b
MD5 fc6000699c0d3b84ea1b18b4c685632c
SHA1 72e8ffa4b1ce58ce69280f5df2ff7205271ee424
SHA512 5dacdc9dd770661fcd537e414a74c4e65a1fa99d8baeba6ddeac9a7ddf56df479ffc6e2867daae726fcc8965743fc98d85702c87ed2d3eb09ef6b0e8179aa223
SSDEEP 3072:uyegW3zKkB1m6d8Hz370jBPQcKmLcO4IO37d:/vAzKkG6gzr0xtyISx
TLSH
T143E34A1B72A530F8E1778139C4621A55F77678350B60AB9F03A0477A2F636E09E3FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b92ba45a120d3b011cd7621f5dd4b088ed9d573c586fd0e2cd8f18918265977b

File Explorer

b92ba45a120d3b011cd7621f5dd4b088ed9d573c586fd0e2cd8f18918265977b

.exe 147KB

b92ba45a120d3b011cd7621f5dd4b088ed9d573c586fd0e2cd8f18918265977b

IMPHASH c4a6460b0588fdd9b3fcd1ace15fe629
SHA256 b92ba45a120d3b011cd7621f5dd4b088ed9d573c586fd0e2cd8f18918265977b
MD5 fc6000699c0d3b84ea1b18b4c685632c
SHA1 72e8ffa4b1ce58ce69280f5df2ff7205271ee424
SHA512 5dacdc9dd770661fcd537e414a74c4e65a1fa99d8baeba6ddeac9a7ddf56df479ffc6e2867daae726fcc8965743fc98d85702c87ed2d3eb09ef6b0e8179aa223
SSDEEP 3072:uyegW3zKkB1m6d8Hz370jBPQcKmLcO4IO37d:/vAzKkG6gzr0xtyISx
TLSH
T143E34A1B72A530F8E1778139C4621A55F77678350B60AB9F03A0477A2F636E09E3FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\danar\OneDrive\Рабочий стол\Sources\Add\salop\x64\Release\salop.pdb

kernel32

GetFileAttributesExA Sleep DeleteFileA CloseHandle CreateDirectoryA WriteConsoleW CreateFileW HeapReAlloc HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WaitForSingleObjectEx GetExitCodeThread GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress WakeAllConditionVariable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap

user32

WaitForInputIdle

shell32

ShellExecuteExA SHGetFolderPathA ShellExecuteA

urlmon

URLDownloadToFileA

Sharing

General

Malware Config

Signatures

File Explorer

b92ba45a120d3b011cd7621f5dd4b088ed9d573c586fd0e2cd8f18918265977b

kernel32

user32

shell32

urlmon

generic