x92d56cb5e3096f5ac9c47f50541ff92a12050ec09c8a07ab85c0c7c22d8ed446[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
x92d56cb5e3096f5ac9c47f50541ff92a12050ec09c8a07ab85c0c7c22d8ed446.exe
Size 503KB
Sample260710-l6rd8aas51
SHA256 92d56cb5e3096f5ac9c47f50541ff92a12050ec09c8a07ab85c0c7c22d8ed446
MD5 e66c7d8e7765f687039e2b0a82ae4733
SHA1 afdee64e44557d3f63cc851ea6a2bcec98807ac8
SHA512 ad099b8e83de1f46d9369992fd7c50ef229660a756e889f74762d63fd42d2a4b41dadee71f23014b09b1531016ecf677ce02e9ac5b6e123192ff5c777cb321b2
SSDEEP 6144:vk56AlTY8T16Q7OE93UDLuo3RPzBzza+iCOtZxgy/SZGfJXnIZRo:vkTFI3E93UHRhPzVa+i1tThivo
TLSH
T197B45C009A5F1CAFD493F53C8A21CD4BD5F27C150B6286AB76A06D1A7FB728269353C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x92d56cb5e3096f5ac9c47f50541ff92a12050ec09c8a07ab85c0c7c22d8ed446.exe

File Explorer

x92d56cb5e3096f5ac9c47f50541ff92a12050ec09c8a07ab85c0c7c22d8ed446.exe

.exe 503KB

x92d56cb5e3096f5ac9c47f50541ff92a12050ec09c8a07ab85c0c7c22d8ed446.exe

IMPHASH bf82bd46a2d1a04bebe82b9142a50d95
SHA256 92d56cb5e3096f5ac9c47f50541ff92a12050ec09c8a07ab85c0c7c22d8ed446
MD5 e66c7d8e7765f687039e2b0a82ae4733
SHA1 afdee64e44557d3f63cc851ea6a2bcec98807ac8
SHA512 ad099b8e83de1f46d9369992fd7c50ef229660a756e889f74762d63fd42d2a4b41dadee71f23014b09b1531016ecf677ce02e9ac5b6e123192ff5c777cb321b2
SSDEEP 6144:vk56AlTY8T16Q7OE93UDLuo3RPzBzza+iCOtZxgy/SZGfJXnIZRo:vkTFI3E93UHRhPzVa+i1tThivo
TLSH
T197B45C009A5F1CAFD493F53C8A21CD4BD5F27C150B6286AB76A06D1A7FB728269353C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

516096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\dvs\p4\build\sw\gcomp\rel\src\ApplicationOntology\build\bin\x64\Release\OAWrapper.pdb

kernel32

GetModuleHandleExW GetModuleFileNameW CreateFileW GetFileAttributesW CloseHandle LocalFree MultiByteToWideChar WideCharToMultiByte GetModuleFileNameA SetLastError GetFullPathNameW LocalAlloc lstrcmpA GetSystemDirectoryW FileTimeToSystemTime VerSetConditionMask GetModuleHandleW VerifyVersionInfoW LoadLibraryExW GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetCurrentProcess RtlUnwindEx RtlPcToFileHeader RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ReadFile GetStdHandle ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType SetFilePointerEx GetConsoleMode ReadConsoleW GetFileSizeEx FlushFileBuffers GetConsoleOutputCP HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW FreeLibrary GetProcAddress GetLastError WriteFile GetStartupInfoW RaiseException

Name

.text

Size

236KB

Virtual Size

236KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

1024B

Virtual Size

640B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

147KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.zero

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

x92d56cb5e3096f5ac9c47f50541ff92a12050ec09c8a07ab85c0c7c22d8ed446.exe

kernel32

generic