16f32ca2bbcfdba72952f806ce895a6e857cc69d61f4dc13d2c801eb2ac94d53

General

Target
16f32ca2bbcfdba72952f806ce895a6e857cc69d61f4dc13d2c801eb2ac94d53
Size 281KB
Sample260706-jv2ppsbw3x
SHA256 16f32ca2bbcfdba72952f806ce895a6e857cc69d61f4dc13d2c801eb2ac94d53
MD5 d56a70333cdbdc9e69ce10821dc13dad
SHA1 2e247ee01101187b285cc8638ceed48af1ce7a79
SHA512 c8135bd1e6b995a15d7a6c0fb1ba524e99f2e2481becdbd5de129c5ceb16797b041abef5c8bebd3708a10e08606d8d987bd9f1b83eebc8f183a80afaea8a5dfd
SSDEEP 6144:2QEaoT5RIRJ0y4vAaXmn/hfLYPyISLzdc:2QDoTIRW9zXKhfU1SL5
TLSH
T10E546B1AB7640CF9EE6BC23DC9524905DB72BC5657A1E7CF03A04A961F236E08E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f32ca2bbcfdba72952f806ce895a6e857cc69d61f4dc13d2c801eb2ac94d53

File Explorer

16f32ca2bbcfdba72952f806ce895a6e857cc69d61f4dc13d2c801eb2ac94d53

.exe 281KB

16f32ca2bbcfdba72952f806ce895a6e857cc69d61f4dc13d2c801eb2ac94d53

IMPHASH 15a1d73feee1088bf3b4d4acfa589482
SHA256 16f32ca2bbcfdba72952f806ce895a6e857cc69d61f4dc13d2c801eb2ac94d53
MD5 d56a70333cdbdc9e69ce10821dc13dad
SHA1 2e247ee01101187b285cc8638ceed48af1ce7a79
SHA512 c8135bd1e6b995a15d7a6c0fb1ba524e99f2e2481becdbd5de129c5ceb16797b041abef5c8bebd3708a10e08606d8d987bd9f1b83eebc8f183a80afaea8a5dfd
SSDEEP 6144:2QEaoT5RIRJ0y4vAaXmn/hfLYPyISLzdc:2QDoTIRW9zXKhfU1SL5
TLSH
T10E546B1AB7640CF9EE6BC23DC9524905DB72BC5657A1E7CF03A04A961F236E08E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

76872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\vboxuser\source\repos\FLCP\x64\Release\FLCP.pdb

kernel32

FindFirstFileA FindNextFileA ExpandEnvironmentStringsA FindClose MultiByteToWideChar WideCharToMultiByte LCMapStringEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetEndOfFile RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetModuleFileNameW GetStdHandle WriteFile RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileSizeEx SetFilePointerEx GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree CloseHandle HeapReAlloc HeapAlloc VirtualProtect LoadLibraryExW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle CreateFileW HeapSize WriteConsoleW RtlUnwind

Name

.text

Size

180KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

79KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

648B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

16f32ca2bbcfdba72952f806ce895a6e857cc69d61f4dc13d2c801eb2ac94d53

kernel32

generic