4aae3fee319f0f58764e311eb01db88fad9b311471df0e98e96cafa47b8022fb

General

Target
4aae3fee319f0f58764e311eb01db88fad9b311471df0e98e96cafa47b8022fb
Size 137KB
Sample260719-ythb1aaz5r
SHA256 4aae3fee319f0f58764e311eb01db88fad9b311471df0e98e96cafa47b8022fb
MD5 9e0d11cb756a0799c5e14be32e697c67
SHA1 81da9b8c300d694024a66c62a1010e755ef32b42
SHA512 0cd8fd06907581092b5732c8c4d0d5fc935f3a2204683030f08cc8c23f320165710193a7f73bfc8a38e97ca13c4a5fe8ddb29722e8d842a60ddd920de3d32100
SSDEEP 3072:lxnfLj4tkKL/QP1ti7LmXbzgo1+LjKx3/:z02QQPhrzgMzv
TLSH
T149D36C67B3E530F9E173863985914646E772B83517609BEF03A4476A2F232D09E3EB31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aae3fee319f0f58764e311eb01db88fad9b311471df0e98e96cafa47b8022fb

File Explorer

4aae3fee319f0f58764e311eb01db88fad9b311471df0e98e96cafa47b8022fb

.exe 137KB

4aae3fee319f0f58764e311eb01db88fad9b311471df0e98e96cafa47b8022fb

IMPHASH 188dd3db22bf8e25b63d9751bc1b3a6b
SHA256 4aae3fee319f0f58764e311eb01db88fad9b311471df0e98e96cafa47b8022fb
MD5 9e0d11cb756a0799c5e14be32e697c67
SHA1 81da9b8c300d694024a66c62a1010e755ef32b42
SHA512 0cd8fd06907581092b5732c8c4d0d5fc935f3a2204683030f08cc8c23f320165710193a7f73bfc8a38e97ca13c4a5fe8ddb29722e8d842a60ddd920de3d32100
SSDEEP 3072:lxnfLj4tkKL/QP1ti7LmXbzgo1+LjKx3/:z02QQPhrzgMzv
TLSH
T149D36C67B3E530F9E173863985914646E772B83517609BEF03A4476A2F232D09E3EB31
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetLastError GetProcAddress LoadLibraryA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CloseHandle CreateFileW

Name

.text

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4aae3fee319f0f58764e311eb01db88fad9b311471df0e98e96cafa47b8022fb

kernel32

generic