14071f8df9492c154c59ea0768aa3bbbe96ef7e90a5511f66793991583b8bd15

Sharing

Copy URL Twitter E-mail

General

Target
14071f8df9492c154c59ea0768aa3bbbe96ef7e90a5511f66793991583b8bd15
Size 264KB
Sample260706-jvwtfsbw2w
SHA256 14071f8df9492c154c59ea0768aa3bbbe96ef7e90a5511f66793991583b8bd15
MD5 233bd41647107bab7ccfd3246be37e1e
SHA1 4f467451f79c2d243801483516f9d2e01be4bffb
SHA512 630fb62dec598fa82afc9b8fa8df8b5c0b157df0c64a537a05d9d844a808f7baec7ef3bdd42a7db5bc832123cfa4169d04c5f425623a09708333cd9df0d967a7
SSDEEP 3072:MtnWrVkGbnhhhyizcuUWx6/SG1/SFfDp7WqlhAOh6+NNFWCRDSLMHa9P+fczTEJW:MZWP6uUJKG1/SFLp7n/6KZK+RmCA
TLSH
T1B1445C15B7A50DF9ED6B963DC8534906EB72BC4607A0DACF03904A971F236D0AE3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14071f8df9492c154c59ea0768aa3bbbe96ef7e90a5511f66793991583b8bd15

File Explorer

14071f8df9492c154c59ea0768aa3bbbe96ef7e90a5511f66793991583b8bd15

.exe 264KB

14071f8df9492c154c59ea0768aa3bbbe96ef7e90a5511f66793991583b8bd15

IMPHASH 71c0292b03d1e71470220825d49ec3b6
SHA256 14071f8df9492c154c59ea0768aa3bbbe96ef7e90a5511f66793991583b8bd15
MD5 233bd41647107bab7ccfd3246be37e1e
SHA1 4f467451f79c2d243801483516f9d2e01be4bffb
SHA512 630fb62dec598fa82afc9b8fa8df8b5c0b157df0c64a537a05d9d844a808f7baec7ef3bdd42a7db5bc832123cfa4169d04c5f425623a09708333cd9df0d967a7
SSDEEP 3072:MtnWrVkGbnhhhyizcuUWx6/SG1/SFfDp7WqlhAOh6+NNFWCRDSLMHa9P+fczTEJW:MZWP6uUJKG1/SFLp7n/6KZK+RmCA
TLSH
T1B1445C15B7A50DF9ED6B963DC8534906EB72BC4607A0DACF03904A971F236D0AE3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateProcessW GetExitCodeProcess WriteConsoleW CloseHandle Sleep WaitForSingleObject HeapSize SetFilePointerEx GetConsoleOutputCP FlushFileBuffers SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage MultiByteToWideChar LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetLastError WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree GetFileType GetConsoleMode FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc

shell32

SHGetKnownFolderPath

ole32

CLSIDFromProgID CoCreateInstance CoUninitialize CoInitialize CoTaskMemFree CoInitializeEx

oleaut32

VariantInit SysFreeString SysAllocString VariantClear

urlmon

URLDownloadToFileW

Sharing

General

Malware Config

Signatures

File Explorer

14071f8df9492c154c59ea0768aa3bbbe96ef7e90a5511f66793991583b8bd15

kernel32

shell32

ole32

oleaut32

urlmon

generic