0e0b8427c9b107838a706009dbf92ecf6b0e97e5528364afb88413b0796655da

Sharing

Copy URL Twitter E-mail

General

Target
0e0b8427c9b107838a706009dbf92ecf6b0e97e5528364afb88413b0796655da
Size 660KB
Sample260706-llz6mac12y
SHA256 0e0b8427c9b107838a706009dbf92ecf6b0e97e5528364afb88413b0796655da
MD5 0c116a459f0cb9e7be34579f9e0c9e8b
SHA1 ff4807db6ccce1b28663b744dee3970d12e64041
SHA512 474e37bc56003e354733014ace82bb04eb2b6ba1f0f34d48847a9c46d80ba1edf876ddf504f38340447be5ce876d8527f198dadb37581dd2c6d16ce9d01ffbf7
SSDEEP 3072:1HnOWgAziAbkpjD6lFsy0rFNBsEO7eAuE1SwJU3IDuy6G80UlbTI3:1HgA22y8sxh/ccMU3MXU1TI3
TLSH
T1D2E42A2BE555A0BED1A68874C506C971EB21BCF98B6197DF07D03EE33D723904F2A612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e0b8427c9b107838a706009dbf92ecf6b0e97e5528364afb88413b0796655da

File Explorer

0e0b8427c9b107838a706009dbf92ecf6b0e97e5528364afb88413b0796655da

.exe 660KB

0e0b8427c9b107838a706009dbf92ecf6b0e97e5528364afb88413b0796655da

IMPHASH 8ee9eb2be28bf756f8d5c425cb906598
SHA256 0e0b8427c9b107838a706009dbf92ecf6b0e97e5528364afb88413b0796655da
MD5 0c116a459f0cb9e7be34579f9e0c9e8b
SHA1 ff4807db6ccce1b28663b744dee3970d12e64041
SHA512 474e37bc56003e354733014ace82bb04eb2b6ba1f0f34d48847a9c46d80ba1edf876ddf504f38340447be5ce876d8527f198dadb37581dd2c6d16ce9d01ffbf7
SSDEEP 3072:1HnOWgAziAbkpjD6lFsy0rFNBsEO7eAuE1SwJU3IDuy6G80UlbTI3:1HgA22y8sxh/ccMU3MXU1TI3
TLSH
T1D2E42A2BE555A0BED1A68874C506C971EB21BCF98B6197DF07D03EE33D723904F2A612
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

552960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetModuleFileNameA WriteConsoleW HeapSize CreateFileW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW SetFilePointerEx GetFileType HeapAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree CloseHandle FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap

shell32

ShellExecuteA

Name

.text

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

377KB

Virtual Size

376KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcdfca

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

0e0b8427c9b107838a706009dbf92ecf6b0e97e5528364afb88413b0796655da

kernel32

shell32

generic