57e55cdc7194d235926618abb4c26ec36bddc2f2e65fed0bc58a7542b18b8cf2

General

Target
57e55cdc7194d235926618abb4c26ec36bddc2f2e65fed0bc58a7542b18b8cf2
Size 106KB
Sample260718-relybagw3s
SHA256 57e55cdc7194d235926618abb4c26ec36bddc2f2e65fed0bc58a7542b18b8cf2
MD5 3252e43d4a7cea86009e125d7eff04c1
SHA1 b9f4e7e2703ca5904a87981bb32d8f62d77f7ac0
SHA512 9562af0ab8ea553a6e85975e203ca44f026f6c0b4757eb3ad183f187054e4423ec32042233f0f448bb4ff1c79933c97208b5b4b52b1119d62bae8efcd55cf35e
SSDEEP 1536:F5etMWcKIPXzsSo2JcLO8ag6THH2Shxvkoi6ZanZNniO38tsWSdn9dllrVKq:F5hSy8O8aF2Oxvkh6QZNiOsIHzrVX
TLSH
T1C3B36B57A3E530F8F5778A38C4A20A45D772B8720B619FEF07A446561F23AD18D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57e55cdc7194d235926618abb4c26ec36bddc2f2e65fed0bc58a7542b18b8cf2

File Explorer

57e55cdc7194d235926618abb4c26ec36bddc2f2e65fed0bc58a7542b18b8cf2

.exe 106KB

57e55cdc7194d235926618abb4c26ec36bddc2f2e65fed0bc58a7542b18b8cf2

IMPHASH 8f08a81d6268c2953fcd7d58bca9c854
SHA256 57e55cdc7194d235926618abb4c26ec36bddc2f2e65fed0bc58a7542b18b8cf2
MD5 3252e43d4a7cea86009e125d7eff04c1
SHA1 b9f4e7e2703ca5904a87981bb32d8f62d77f7ac0
SHA512 9562af0ab8ea553a6e85975e203ca44f026f6c0b4757eb3ad183f187054e4423ec32042233f0f448bb4ff1c79933c97208b5b4b52b1119d62bae8efcd55cf35e
SSDEEP 1536:F5etMWcKIPXzsSo2JcLO8ag6THH2Shxvkoi6ZanZNniO38tsWSdn9dllrVKq:F5hSy8O8aF2Oxvkh6QZNiOsIHzrVX
TLSH
T1C3B36B57A3E530F8F5778A38C4A20A45D772B8720B619FEF07A446561F23AD18D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Project\static\x64\Release\static.pdb

kernel32

WinExec WriteConsoleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

57e55cdc7194d235926618abb4c26ec36bddc2f2e65fed0bc58a7542b18b8cf2

kernel32

generic