9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28

General

Target
9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28
Size 351KB
Sample260706-j7261ags2m
SHA256 9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28
MD5 27c4055af41998fe56b24d4689da0e48
SHA1 8319af7ee80a527da7098d3a18a21f3ccf76a21f
SHA512 a85be93890a997082c88bc705a7dcafbfe23081564bf10cd80fb439ac1d6865d06a6950bfaf2e8e5283bbc095e09e98af056092ea20f8a66554dc4493c03eed8
SSDEEP 6144:CrtPYijoYFvmVooy/ok9sJoV5eVEvuEuCIUOzI8:Cr+ijodbyQkL5IEjWzI
TLSH
T1E074F19B72B934FCD6B78639C4550909A3B2F8320B619BEF03A546161F376E15D3AF20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28

File Explorer

9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28

.exe 351KB

9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28

IMPHASH c73309c7ba4eb4f635fff91fb63e6e65
SHA256 9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28
MD5 27c4055af41998fe56b24d4689da0e48
SHA1 8319af7ee80a527da7098d3a18a21f3ccf76a21f
SHA512 a85be93890a997082c88bc705a7dcafbfe23081564bf10cd80fb439ac1d6865d06a6950bfaf2e8e5283bbc095e09e98af056092ea20f8a66554dc4493c03eed8
SSDEEP 6144:CrtPYijoYFvmVooy/ok9sJoV5eVEvuEuCIUOzI8:Cr+ijodbyQkL5IEjWzI
TLSH
T1E074F19B72B934FCD6B78639C4550909A3B2F8320B619BEF03A546161F376E15D3AF20
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6408

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentProcess ResumeThread CreateProcessA GetThreadContext SetThreadContext GetSystemDirectoryA WriteProcessMemory GetModuleHandleA GetProcAddress lstrcatA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode

ntdll

RtlCaptureContext RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind

Name

.text

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

253KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28

kernel32

ntdll

generic