a57faa6b843f92bde9f1c0d286f9f4340492345d92ffebcd6f60a137601081ff

General

Target
a57faa6b843f92bde9f1c0d286f9f4340492345d92ffebcd6f60a137601081ff
Size 383KB
Sample260706-j9cdcscs8z
SHA256 a57faa6b843f92bde9f1c0d286f9f4340492345d92ffebcd6f60a137601081ff
MD5 5584ee249af21c62ec7e4061dd0a9e0f
SHA1 713824bc225bd9415eba7694b290056c4bf2bcc7
SHA512 f54bb9bcf438d549bd40a57fbb80e47923901e9a4683e997f5ec30ace010ca71132bc74fbf68400e711eb6a2f023890caf25e11bf0ddffe22175737591e754bd
SSDEEP 6144:GzCUUmrHIKHLFD8hJJ9t06U6DTZ+W+2vHJ3Yjho:ZAoKHLN8l9t0dKu
TLSH
T1B7848D1AF7A414F9E57BC13CC9464905EB72BC5647A1EBCF13A04A962F232E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a57faa6b843f92bde9f1c0d286f9f4340492345d92ffebcd6f60a137601081ff

File Explorer

a57faa6b843f92bde9f1c0d286f9f4340492345d92ffebcd6f60a137601081ff

.exe 383KB

a57faa6b843f92bde9f1c0d286f9f4340492345d92ffebcd6f60a137601081ff

IMPHASH 1eadadfea576a0e432b93d43bb6ed3f1
SHA256 a57faa6b843f92bde9f1c0d286f9f4340492345d92ffebcd6f60a137601081ff
MD5 5584ee249af21c62ec7e4061dd0a9e0f
SHA1 713824bc225bd9415eba7694b290056c4bf2bcc7
SHA512 f54bb9bcf438d549bd40a57fbb80e47923901e9a4683e997f5ec30ace010ca71132bc74fbf68400e711eb6a2f023890caf25e11bf0ddffe22175737591e754bd
SSDEEP 6144:GzCUUmrHIKHLFD8hJJ9t06U6DTZ+W+2vHJ3Yjho:ZAoKHLN8l9t0dKu
TLSH
T1B7848D1AF7A414F9E57BC13CC9464905EB72BC5647A1EBCF13A04A962F232E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

82800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\danar\source\repos\mafe\x64\Release\mafe.pdb

kernel32

SetStdHandle HeapSize WriteConsoleW GetConsoleWindow GetModuleFileNameW GetProcessHeap MultiByteToWideChar LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI CloseHandle GetLastError GetModuleHandleW GetProcAddress GetFileInformationByHandleEx WideCharToMultiByte QueryPerformanceCounter QueryPerformanceFrequency GetStringTypeW GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive Sleep InitializeCriticalSectionEx GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx WakeAllConditionVariable GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType WaitForSingleObject GetExitCodeProcess CreateProcessW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW RtlUnwind

user32

ShowWindow

advapi32

AllocateAndInitializeSid FreeSid CheckTokenMembership

shell32

ShellExecuteW

Sharing

General

Malware Config

Signatures

File Explorer

a57faa6b843f92bde9f1c0d286f9f4340492345d92ffebcd6f60a137601081ff

kernel32

user32

advapi32

shell32

generic