577ab33e478e8d83d6429b2b11746711a184663de44b1f8d786119c5585407e9

Sharing

Copy URL Twitter E-mail

General

Target
577ab33e478e8d83d6429b2b11746711a184663de44b1f8d786119c5585407e9
Size 71KB
Sample260709-phf55abt4t
SHA256 577ab33e478e8d83d6429b2b11746711a184663de44b1f8d786119c5585407e9
MD5 1f26055a8d6270185b1b653d261dd913
SHA1 3f5f3f45ee65c155076bddc7344102a8340591ac
SHA512 1fdf7473bd565047968117094abac424c5c514982052d4e12dd789e00ebe4646ac650ad1d9ad117457f49b3d2ac7b28a51c739292d938127df9d7739d584287a
SSDEEP 768:0V9fhrvYLj1S/ZogxLoOL1iSUZqtquWlxf1XX0KdX2fmOZKNXnfG6Vh3yDs94Y9k:62j1S/Z9x4S/wrJEKdSmOIXvmw94Yan
TLSH
T1F463380A978294E4CC3E817895730793E733F8806716BBDF2260A10D5F3BBD1AD75A5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
577ab33e478e8d83d6429b2b11746711a184663de44b1f8d786119c5585407e9

File Explorer

577ab33e478e8d83d6429b2b11746711a184663de44b1f8d786119c5585407e9

.exe 71KB

577ab33e478e8d83d6429b2b11746711a184663de44b1f8d786119c5585407e9

IMPHASH 41982bd262aef06fa9251fff17f611a6
SHA256 577ab33e478e8d83d6429b2b11746711a184663de44b1f8d786119c5585407e9
MD5 1f26055a8d6270185b1b653d261dd913
SHA1 3f5f3f45ee65c155076bddc7344102a8340591ac
SHA512 1fdf7473bd565047968117094abac424c5c514982052d4e12dd789e00ebe4646ac650ad1d9ad117457f49b3d2ac7b28a51c739292d938127df9d7739d584287a
SSDEEP 768:0V9fhrvYLj1S/ZogxLoOL1iSUZqtquWlxf1XX0KdX2fmOZKNXnfG6Vh3yDs94Y9k:62j1S/Z9x4S/wrJEKdSmOIXvmw94Yan
TLSH
T1F463380A978294E4CC3E817895730793E733F8806716BBDF2260A10D5F3BBD1AD75A5A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26032

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\vboxuser\source\repos\saolei\x64\Release\saolei.pdb

kernel32

GetCurrentThreadId GetCurrentProcessId InitializeSListHead GetModuleHandleW GetStartupInfoW SetUnhandledExceptionFilter lstrlenW ExitProcess SetFilePointerEx CloseHandle GetSystemTimeAsFileTime CreateFileA Sleep DeviceIoControl lstrcpynW WriteFile QueryPerformanceCounter

user32

GetSystemMenu DefWindowProcW GetMessageW DialogBoxParamW GetWindowRect GetMenu GetDC MessageBoxW MonitorFromRect SetWindowRgn CreateWindowExW SendMessageW GetSystemMetrics RegisterClassExW DrawIcon LoadAcceleratorsW LoadStringW ShowWindow DispatchMessageW SetTimer RedrawWindow DestroyIcon GetMonitorInfoW GetForegroundWindow MoveWindow AdjustWindowRect LoadBitmapW IntersectRect TranslateAcceleratorW TranslateMessage LoadIconW LoadCursorW SetCapture wsprintfW LoadIconA CheckMenuItem IsZoomed SetRect PostQuitMessage GetSysColorBrush SetDlgItemInt PtInRect UpdateWindow ReleaseCapture LoadImageW IsIconic ReleaseDC BeginPaint EndPaint GetDlgItemInt GetDlgItemTextW SetDlgItemTextW EndDialog EnableMenuItem

gdi32

BitBlt SelectObject CreateCompatibleDC CreateEllipticRgn PatBlt StretchBlt CreateRectRgn DeleteDC SetTextColor TextOutA SetBkMode DeleteObject CombineRgn

advapi32

RegCloseKey RegQueryValueExW RegSetValueExW RegOpenKeyExW RegCreateKeyExW

shell32

ShellAboutW

msvcp140

_Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?_Xbad_function_call@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z _Cnd_do_broadcast_at_thread_exit _Thrd_detach _Query_perf_counter

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy __current_exception_context __current_exception memset __C_specific_handler __std_exception_copy __std_exception_destroy _CxxThrowException

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

rand srand

api-ms-win-crt-runtime-l1-1-0

_exit _get_wide_winmain_command_line _c_exit _register_thread_local_exe_atexit_callback exit _configure_wide_argv _initterm_e _set_app_type _seh_filter_exe _cexit terminate _initialize_wide_environment _beginthreadex _initterm _register_onexit_function _initialize_onexit_table _crt_atexit

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

strlen

Sharing

General

Malware Config

Signatures

File Explorer

577ab33e478e8d83d6429b2b11746711a184663de44b1f8d786119c5585407e9

kernel32

user32

gdi32

advapi32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

generic