d4fb431d3b97216908188568dcd8068a2e64db08de0c808ea623e185fccd9292

Sharing

Copy URL Twitter E-mail

General

Target
d4fb431d3b97216908188568dcd8068a2e64db08de0c808ea623e185fccd9292
Size 67KB
Sample260706-lrhtjac19s
SHA256 d4fb431d3b97216908188568dcd8068a2e64db08de0c808ea623e185fccd9292
MD5 4e82552f6f7c4031a3304f48a61aa382
SHA1 0f6971cb6109e3a1b29139e1662d524e5057741a
SHA512 09eeef17135297ae6b70b8842991443e5851b1920fc1eadb731498c26e5086982d1e468b23d18236381ee4be85e7312195e998c8acf0d4b3dc677bdb171ab990
SSDEEP 384:SQ1jyJIXflZOvkMXoL5dLsVeTVy+cz1eSI0ZnB/SfvvbS4oQfBhv/EefnbkAl9Xt:SQMIlEkMXYpyTJA86f3bSWBtbkAl99
TLSH
T19263055BB38620F7D9BAC2789DC69229B7B170B0032A07DF515049B96E607EC2D3DBC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4fb431d3b97216908188568dcd8068a2e64db08de0c808ea623e185fccd9292

File Explorer

d4fb431d3b97216908188568dcd8068a2e64db08de0c808ea623e185fccd9292

.exe 67KB

d4fb431d3b97216908188568dcd8068a2e64db08de0c808ea623e185fccd9292

IMPHASH 00aa0a3d4cb035f300d818819e5780ed
SHA256 d4fb431d3b97216908188568dcd8068a2e64db08de0c808ea623e185fccd9292
MD5 4e82552f6f7c4031a3304f48a61aa382
SHA1 0f6971cb6109e3a1b29139e1662d524e5057741a
SHA512 09eeef17135297ae6b70b8842991443e5851b1920fc1eadb731498c26e5086982d1e468b23d18236381ee4be85e7312195e998c8acf0d4b3dc677bdb171ab990
SSDEEP 384:SQ1jyJIXflZOvkMXoL5dLsVeTVy+cz1eSI0ZnB/SfvvbS4oQfBhv/EefnbkAl9Xt:SQMIlEkMXYpyTJA86f3bSWBtbkAl99
TLSH
T19263055BB38620F7D9BAC2789DC69229B7B170B0032A07DF515049B96E607EC2D3DBC5
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69722

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Project5\x64\Debug\Project5.pdb

vcruntime140d

__vcrt_LoadLibraryExW __vcrt_GetModuleHandleW __vcrt_GetModuleFileNameW __current_exception_context __current_exception __std_type_info_destroy_list __C_specific_handler_noexcept __C_specific_handler strchr memcpy

ucrtbased

_register_thread_local_exe_atexit_callback _configthreadlocale _set_new_mode __p__commode _cexit strcat_s __stdio_common_vsprintf_s _seh_filter_dll _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit terminate _wmakepath_s _wsplitpath_s wcscpy_s _c_exit __p___argv __p___argc _set_fmode _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __setusermatherr _set_app_type _seh_filter_exe _CrtDbgReportW _CrtDbgReport __stdio_common_vfprintf getchar __acrt_iob_func strlen strcpy_s

kernel32

HeapFree IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetProcAddress FreeLibrary VirtualQuery GetProcessHeap GetCurrentThreadId HeapAlloc GetLastError GetModuleHandleW GetStartupInfoW

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

776B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

451B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

678B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d4fb431d3b97216908188568dcd8068a2e64db08de0c808ea623e185fccd9292

vcruntime140d

ucrtbased

kernel32

generic