b72b6656fdcdeb3bc2b01a8860f50d8a8edb3c763a256902400281a2157c45a1

Sharing

Copy URL Twitter E-mail

General

Target
b72b6656fdcdeb3bc2b01a8860f50d8a8edb3c763a256902400281a2157c45a1
Size 60KB
Sample260719-2phnraht7x
SHA256 b72b6656fdcdeb3bc2b01a8860f50d8a8edb3c763a256902400281a2157c45a1
MD5 0425673561cbf223879da19f505083f5
SHA1 d52682c8f9cadca118c7e8fe799da9e0e9c99a89
SHA512 590ee103ee1f9b2ed5df7a82aaaa364b7911a0ff15ada1afea7c5d46544427d40808c0e1504309136406ee59e614ea829148dfdd82ff93e345c09acf33424539
SSDEEP 384:bbC2jtvlXeT1ysLUih5Io14INSzk+gmwSo502Odyw41bQfBX4DP89ZSg:bJjYyKUHAlJ+41SBiP89k
TLSH
T1A553C65A7B9671FBD477C03E8A922235B6B070B013324BCB510859796F626F83D3E788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b72b6656fdcdeb3bc2b01a8860f50d8a8edb3c763a256902400281a2157c45a1

File Explorer

b72b6656fdcdeb3bc2b01a8860f50d8a8edb3c763a256902400281a2157c45a1

.exe 60KB

b72b6656fdcdeb3bc2b01a8860f50d8a8edb3c763a256902400281a2157c45a1

IMPHASH df1f3aec9532f58175a37fe7619f7029
SHA256 b72b6656fdcdeb3bc2b01a8860f50d8a8edb3c763a256902400281a2157c45a1
MD5 0425673561cbf223879da19f505083f5
SHA1 d52682c8f9cadca118c7e8fe799da9e0e9c99a89
SHA512 590ee103ee1f9b2ed5df7a82aaaa364b7911a0ff15ada1afea7c5d46544427d40808c0e1504309136406ee59e614ea829148dfdd82ff93e345c09acf33424539
SSDEEP 384:bbC2jtvlXeT1ysLUih5Io14INSzk+gmwSo502Odyw41bQfBX4DP89ZSg:bJjYyKUHAlJ+41SBiP89k
TLSH
T1A553C65A7B9671FBD477C03E8A922235B6B070B013324BCB510859796F626F83D3E788
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70242

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\vs\StaticTest\x64\Debug\StaticTest.pdb

kernel32

WinExec QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter TerminateProcess GetCurrentProcess GetProcAddress FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetLastError WideCharToMultiByte MultiByteToWideChar RaiseException GetModuleHandleW IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter GetCurrentThreadId

vcruntime140d

__C_specific_handler_noexcept __vcrt_GetModuleHandleW __current_exception __std_type_info_destroy_list __C_specific_handler __current_exception_context __vcrt_GetModuleFileNameW __vcrt_LoadLibraryExW memcpy

ucrtbased

terminate strcpy_s strcat_s __stdio_common_vsprintf_s _wmakepath_s _wsplitpath_s wcscpy_s _crt_at_quick_exit _execute_onexit_table _register_onexit_function _initialize_onexit_table _seh_filter_dll __p__commode _set_new_mode _configthreadlocale _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_fmode _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __setusermatherr _set_app_type _seh_filter_exe _CrtDbgReportW _CrtDbgReport _crt_atexit

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

607B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b72b6656fdcdeb3bc2b01a8860f50d8a8edb3c763a256902400281a2157c45a1

kernel32

vcruntime140d

ucrtbased

generic