903b80e6d7a10c2c285975ad52845b6bd24ee5f9055515df064e7e9dbe82746c

Sharing

Copy URL Twitter E-mail

General

Target
903b80e6d7a10c2c285975ad52845b6bd24ee5f9055515df064e7e9dbe82746c
Size 724KB
Sample260604-zyfveae16x
SHA256 903b80e6d7a10c2c285975ad52845b6bd24ee5f9055515df064e7e9dbe82746c
MD5 faa77360f771892ddf6282bb8c72efb0
SHA1 9eab7650422e8100af1a5a604f3c334f70f337e9
SHA512 130975b4969ef1b0a8f5d9d105589bde844172cabacc49decb7ad3e58e61f03918c06f81399142856e13f477ab6a7decf3856ad4fb18286d14532da3519226d9
SSDEEP 12288:+3E5eFL006nhA5on0JsgKLPIiWXV8gM+PLMzqbOAXC0A2lrEmOdrL5UJ8AywOcy4:+3E5/06y5oOTKTIFXVK+PVA2loPdrL4O
TLSH
T1B5F4233FC669C4C5E7931AB96C614BF018707C9EC8A5A43C0073A6E079EB9D15B7CAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
903b80e6d7a10c2c285975ad52845b6bd24ee5f9055515df064e7e9dbe82746c

File Explorer

903b80e6d7a10c2c285975ad52845b6bd24ee5f9055515df064e7e9dbe82746c

.exe 724KB

903b80e6d7a10c2c285975ad52845b6bd24ee5f9055515df064e7e9dbe82746c

IMPHASH 538fe118b03fba972f5f932e08ed0963
SHA256 903b80e6d7a10c2c285975ad52845b6bd24ee5f9055515df064e7e9dbe82746c
MD5 faa77360f771892ddf6282bb8c72efb0
SHA1 9eab7650422e8100af1a5a604f3c334f70f337e9
SHA512 130975b4969ef1b0a8f5d9d105589bde844172cabacc49decb7ad3e58e61f03918c06f81399142856e13f477ab6a7decf3856ad4fb18286d14532da3519226d9
SSDEEP 12288:+3E5eFL006nhA5on0JsgKLPIiWXV8gM+PLMzqbOAXC0A2lrEmOdrL5UJ8AywOcy4:+3E5/06y5oOTKTIFXVK+PVA2loPdrL4O
TLSH
T1B5F4233FC669C4C5E7931AB96C614BF018707C9EC8A5A43C0073A6E079EB9D15B7CAC9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4342

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CloseHandle DeleteCriticalSection EnterCriticalSection FreeLibrary GetLastError GetModuleHandleA GetProcAddress GetStartupInfoA InitializeCriticalSection LeaveCriticalSection LoadLibraryA SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

api-ms-win-crt-private-l1-1-0

__C_specific_handler memcpy

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv __p__acmdln _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _exit _initialize_narrow_environment _initialize_wide_environment _initterm _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fwrite

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

Name

.text

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

702KB

Virtual Size

702KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

780B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

808B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

140B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

903b80e6d7a10c2c285975ad52845b6bd24ee5f9055515df064e7e9dbe82746c

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

generic