de82719b7949b373628ba35279cd36a26b6664ce06989625afa50e23be7bc042

General

Target
de82719b7949b373628ba35279cd36a26b6664ce06989625afa50e23be7bc042
Size 13KB
Sample260717-mf68escx21
SHA256 de82719b7949b373628ba35279cd36a26b6664ce06989625afa50e23be7bc042
MD5 216a355773eabc1f298b15963cfe9d8c
SHA1 b02717fe03317b21ee9c913b521eaf41acba597f
SHA512 27749b7a5f93f98eebff1c095c93869a5d709e371e4c7b18ffb4e964344a1f63a74b26d4feb312387ccdae52bb07819b0f088f7e28cc115dc8881c8dc5d08c61
SSDEEP 192:ep1G2/0/D4/MYTb21PHSCbYXSBJcW5tfGL54WE:E428/DffLBJcL4W
TLSH
T199524B87B7D20CEAD43AC232C8632819E076F6354BF3969F4774E2281EF62926D55684
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de82719b7949b373628ba35279cd36a26b6664ce06989625afa50e23be7bc042

File Explorer

de82719b7949b373628ba35279cd36a26b6664ce06989625afa50e23be7bc042

.exe 13KB

de82719b7949b373628ba35279cd36a26b6664ce06989625afa50e23be7bc042

IMPHASH 2512372ace8542fe5ef9b9c056564c30
SHA256 de82719b7949b373628ba35279cd36a26b6664ce06989625afa50e23be7bc042
MD5 216a355773eabc1f298b15963cfe9d8c
SHA1 b02717fe03317b21ee9c913b521eaf41acba597f
SHA512 27749b7a5f93f98eebff1c095c93869a5d709e371e4c7b18ffb4e964344a1f63a74b26d4feb312387ccdae52bb07819b0f088f7e28cc115dc8881c8dc5d08c61
SSDEEP 192:ep1G2/0/D4/MYTb21PHSCbYXSBJcW5tfGL54WE:E428/DffLBJcL4W
TLSH
T199524B87B7D20CEAD43AC232C8632819E076F6354BF3969F4774E2281EF62926D55684
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\projects\vc143\HWAdaptor\x64\Release\HWNormal.pdb

kernel32

CreateToolhelp32Snapshot GetLastError Process32NextW Process32FirstW CloseHandle RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent RtlCaptureContext GetModuleHandleW

user32

GetWindowTextW GetParent SystemParametersInfoW EnumWindows GetWindowThreadProcessId IsWindowVisible SetWindowPos GetMonitorInfoW MonitorFromWindow

vcruntime140

__current_exception_context __C_specific_handler memset __current_exception memcpy

api-ms-win-crt-stdio-l1-1-0

__p__commode __acrt_iob_func __stdio_common_vfwprintf _set_fmode

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _c_exit _crt_atexit terminate _seh_filter_exe _set_app_type _register_thread_local_exe_atexit_callback __p___wargv _register_onexit_function __p___argc _configure_wide_argv _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

de82719b7949b373628ba35279cd36a26b6664ce06989625afa50e23be7bc042

kernel32

user32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic