132b2f8b17e6e5f2c4d554d704f7e4ea00867f5e6867793b26aa56d7f160bb42

Sharing

Copy URL Twitter E-mail

General

Target
132b2f8b17e6e5f2c4d554d704f7e4ea00867f5e6867793b26aa56d7f160bb42
Size 468KB
Sample260702-3teckads8j
SHA256 132b2f8b17e6e5f2c4d554d704f7e4ea00867f5e6867793b26aa56d7f160bb42
MD5 ae5498bf4ebf8031ecdfb8fa91edca01
SHA1 278394226c033f454f196da060d6031e722de17b
SHA512 e51c12883965101b153e51626760def77bd50f29422b12514a0cda2b5e0e55443773dff03d5e5296d02ccfbed6b9675fb7dfbc2ae64e8015f84f7d7fb6105de5
SSDEEP 12288:ZE50SkHOAi9bqNiya7FFvvevheLDr+l1PQ:LSNAEbqNiyaxFvvevheLDr+l1PQ
TLSH
T179A44B96BB01F237D49639B88E5AD7C426B4F5301C62529BBECB0B7E1E705D42F2470A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
132b2f8b17e6e5f2c4d554d704f7e4ea00867f5e6867793b26aa56d7f160bb42

File Explorer

132b2f8b17e6e5f2c4d554d704f7e4ea00867f5e6867793b26aa56d7f160bb42

.dll 468KB

132b2f8b17e6e5f2c4d554d704f7e4ea00867f5e6867793b26aa56d7f160bb42

IMPHASH 73307b439a3cfc416021b2ba827a65fc
SHA256 132b2f8b17e6e5f2c4d554d704f7e4ea00867f5e6867793b26aa56d7f160bb42
MD5 ae5498bf4ebf8031ecdfb8fa91edca01
SHA1 278394226c033f454f196da060d6031e722de17b
SHA512 e51c12883965101b153e51626760def77bd50f29422b12514a0cda2b5e0e55443773dff03d5e5296d02ccfbed6b9675fb7dfbc2ae64e8015f84f7d7fb6105de5
SSDEEP 12288:ZE50SkHOAi9bqNiya7FFvvevheLDr+l1PQ:LSNAEbqNiyaxFvvevheLDr+l1PQ
TLSH
T179A44B96BB01F237D49639B88E5AD7C426B4F5301C62529BBECB0B7E1E705D42F2470A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

GetStdHandle GetConsoleMode TlsGetValue GetLastError SetLastError GetCurrentThreadId GetStartupInfoA GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer SetEndOfFile GetSystemInfo LoadLibraryW LoadLibraryA GetProcAddress FreeLibrary FormatMessageW CreateFileW GetFileAttributesW GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsFree TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource OpenProcess GetProcessId IsWow64Process Module32FirstW Module32NextW CreateToolhelp32Snapshot OutputDebugStringA GetWindowsDirectoryA GetVersionExA CompareStringA GetLocaleInfoA EnumCalendarInfoA GetWindowsDirectoryW CompareStringW VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtectEx VirtualQueryEx CreateRemoteThread GetExitCodeThread WriteProcessMemory GetCPInfo GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW PeekMessageA CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA MsgWaitForMultipleObjects GetSystemMetrics MessageBeep

imagehlp

SymGetOptions SymCleanup SymSetOptions SymEnumerateModules64 SymEnumerateSymbols64 SymLoadModule64 SymInitialize

advapi32

LookupPrivilegeValueA OpenProcessToken AdjustTokenPrivileges

Name

.text

Size

283KB

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

68KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

87KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

��H

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

��H

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

20KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.SCY

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

132b2f8b17e6e5f2c4d554d704f7e4ea00867f5e6867793b26aa56d7f160bb42

kernel32

oleaut32

user32

imagehlp

advapi32

generic