6bdf4c9b9efe0dbc69ff461b79b31bbc9f53fcce7d23a479a6dd8bbbe782357f

General

Target
6bdf4c9b9efe0dbc69ff461b79b31bbc9f53fcce7d23a479a6dd8bbbe782357f
Size 251KB
Sample260718-abc3kadx2v
SHA256 6bdf4c9b9efe0dbc69ff461b79b31bbc9f53fcce7d23a479a6dd8bbbe782357f
MD5 4dce5681838a47fd984cd7a7e053b96d
SHA1 cf310266eb9549b82cadf10b1f9092005130c0d4
SHA512 7dec94f7c0f15a2c9a5c0ea5d6d7987a26d89a8ef42145e94eeaf661889921b63b1d0bd24178934053d18198460a1521e8f2c7c36bb89ab57f3da5702de97100
SSDEEP 6144:3IIIILaWG1Sxc6qRYSM4+EKPF/khNfOEO3PU5pW70:DaNIZmYfEKhP3ypw0
TLSH
T1DA448E307955CA33D66709345AD8CFBEA53E69611FA094CBB7840FAEC8302D26735A37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bdf4c9b9efe0dbc69ff461b79b31bbc9f53fcce7d23a479a6dd8bbbe782357f

File Explorer

6bdf4c9b9efe0dbc69ff461b79b31bbc9f53fcce7d23a479a6dd8bbbe782357f

.exe 251KB

6bdf4c9b9efe0dbc69ff461b79b31bbc9f53fcce7d23a479a6dd8bbbe782357f

IMPHASH 0a72c26798b68724df90b7b27eeb110f
SHA256 6bdf4c9b9efe0dbc69ff461b79b31bbc9f53fcce7d23a479a6dd8bbbe782357f
MD5 4dce5681838a47fd984cd7a7e053b96d
SHA1 cf310266eb9549b82cadf10b1f9092005130c0d4
SHA512 7dec94f7c0f15a2c9a5c0ea5d6d7987a26d89a8ef42145e94eeaf661889921b63b1d0bd24178934053d18198460a1521e8f2c7c36bb89ab57f3da5702de97100
SSDEEP 6144:3IIIILaWG1Sxc6qRYSM4+EKPF/khNfOEO3PU5pW70:DaNIZmYfEKhP3ypw0
TLSH
T1DA448E307955CA33D66709345AD8CFBEA53E69611FA094CBB7840FAEC8302D26735A37
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

73966

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\jenkins\workspace\pc-2345softmgr-build\SoftMgr\main\bin\Win32\release\pdb\2345SoftMgrShell.pdb

kernel32

GetModuleFileNameW GetFileAttributesW GetModuleHandleW LoadLibraryExW CreateFileW GetLastError GetFileAttributesExW lstrlenW GetVersionExW ReadFile WriteFile SetFilePointer SetEndOfFile DeleteFileW CloseHandle GetFileSizeEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetFileSize CreateDirectoryW GetFullPathNameW FindNextFileW FindClose WaitForSingleObject LocalFree GetCurrentProcessId CreateMutexW ReleaseMutex HeapFree GetCurrentThreadId HeapAlloc GetProcessHeap FreeLibrary FormatMessageW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetStdHandle GetEnvironmentVariableW GetFileType MultiByteToWideChar RtlUnwind RaiseException SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer WriteConsoleW GetProcAddress LoadLibraryW

Name

.text

Size

156KB

Virtual Size

155KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.msvcjmc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6bdf4c9b9efe0dbc69ff461b79b31bbc9f53fcce7d23a479a6dd8bbbe782357f

kernel32

generic