a779ff4bf4bd7093c3e04ccc12367e06195b41aef0d150a8ce4ec06cccaf3a65

General

Target
a779ff4bf4bd7093c3e04ccc12367e06195b41aef0d150a8ce4ec06cccaf3a65
Size 250KB
Sample260719-mwb28acs21
SHA256 a779ff4bf4bd7093c3e04ccc12367e06195b41aef0d150a8ce4ec06cccaf3a65
MD5 9446e3cff84d2192031f2d64670c9a73
SHA1 e950e729af4ed9ff22f9feb846dac6529b5ec4ec
SHA512 4c206f258c82c5d5ac77dc2f1453d2e80f20b7ed12c2fe7c5825db95fc7036c10325cddbe2d36c43fee07ce2ac49a0e42ceb34a2cf5a5db20bad8bfb8407ed10
SSDEEP 3072:/0u5VIFt97/w27UOVCb/c/rLVn5IN2kHoMclfepDEfTDv++MIE2fh+Jcc:/g/7/h7tCb/czBn5INAlWpI3xH+L
TLSH
T151447C5973A40CF8ECB7823DC9524A06E7B2BC164760E78F03A0465B5F276E19D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a779ff4bf4bd7093c3e04ccc12367e06195b41aef0d150a8ce4ec06cccaf3a65

File Explorer

a779ff4bf4bd7093c3e04ccc12367e06195b41aef0d150a8ce4ec06cccaf3a65

.exe 250KB

a779ff4bf4bd7093c3e04ccc12367e06195b41aef0d150a8ce4ec06cccaf3a65

IMPHASH 00b3b2903d798de2e0f8b4639f5f0eda
SHA256 a779ff4bf4bd7093c3e04ccc12367e06195b41aef0d150a8ce4ec06cccaf3a65
MD5 9446e3cff84d2192031f2d64670c9a73
SHA1 e950e729af4ed9ff22f9feb846dac6529b5ec4ec
SHA512 4c206f258c82c5d5ac77dc2f1453d2e80f20b7ed12c2fe7c5825db95fc7036c10325cddbe2d36c43fee07ce2ac49a0e42ceb34a2cf5a5db20bad8bfb8407ed10
SSDEEP 3072:/0u5VIFt97/w27UOVCb/c/rLVn5IN2kHoMclfepDEfTDv++MIE2fh+Jcc:/g/7/h7tCb/czBn5INAlWpI3xH+L
TLSH
T151447C5973A40CF8ECB7823DC9524A06E7B2BC164760E78F03A0465B5F276E19D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

33872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Andrew\Desktop\dynamic\x64\Release\dynamic.pdb

kernel32

LoadLibraryA GetProcAddress FreeLibrary WriteConsoleW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize CreateFileW RtlUnwind

Sharing

General

Malware Config

Signatures

File Explorer

a779ff4bf4bd7093c3e04ccc12367e06195b41aef0d150a8ce4ec06cccaf3a65

kernel32

generic