143f20df3293bc1dbdfdf3cfac41e2598d57def221f0f7ad9c09894b7461add3

General

Target
143f20df3293bc1dbdfdf3cfac41e2598d57def221f0f7ad9c09894b7461add3
Size 178KB
Sample260720-ln16psf14z
SHA256 143f20df3293bc1dbdfdf3cfac41e2598d57def221f0f7ad9c09894b7461add3
MD5 edfa82ff2610ca6d08112a83e77effe7
SHA1 0be3f889a7317394ed9a4bf6dd1a1413df1feafa
SHA512 6248830d0c1635820d0364dda79e789e70432defdff84b00677eab6705921fa03dea247b9fd69f9a5c7ffcd225bb4fe1910626ea585480e3e75a60cd6d2c0a95
SSDEEP 3072:e/b+DAe+EBsKIW7GPv8SuB2tLsPVv1bnJ1ODQgbfp98P8N:eDSAe+EBzrqv8SgdbnXOV
TLSH
T1AC048C55B7A500F5E0B78279C9524A46FA72B80607609BDF03A447B2EF233E19D3FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
143f20df3293bc1dbdfdf3cfac41e2598d57def221f0f7ad9c09894b7461add3

File Explorer

143f20df3293bc1dbdfdf3cfac41e2598d57def221f0f7ad9c09894b7461add3

.exe 178KB

143f20df3293bc1dbdfdf3cfac41e2598d57def221f0f7ad9c09894b7461add3

IMPHASH a6892635f92e3e5e70a0d444b4850757
SHA256 143f20df3293bc1dbdfdf3cfac41e2598d57def221f0f7ad9c09894b7461add3
MD5 edfa82ff2610ca6d08112a83e77effe7
SHA1 0be3f889a7317394ed9a4bf6dd1a1413df1feafa
SHA512 6248830d0c1635820d0364dda79e789e70432defdff84b00677eab6705921fa03dea247b9fd69f9a5c7ffcd225bb4fe1910626ea585480e3e75a60cd6d2c0a95
SSDEEP 3072:e/b+DAe+EBsKIW7GPv8SuB2tLsPVv1bnJ1ODQgbfp98P8N:eDSAe+EBzrqv8SgdbnXOV
TLSH
T1AC048C55B7A500F5E0B78279C9524A46FA72B80607609BDF03A447B2EF233E19D3FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7564

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wininet

HttpQueryInfoA InternetReadFile InternetOpenUrlA InternetCloseHandle InternetOpenA

kernel32

WriteFile WriteConsoleW SetEndOfFile HeapReAlloc HeapSize CreateFileW GetLastError HeapAlloc HeapFree GetProcessHeap VirtualAlloc VirtualProtect VirtualFree GetModuleHandleA GetProcAddress SwitchToFiber DeleteFiber ConvertFiberToThread CreateFiber ConvertThreadToFiber QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetFileSizeEx RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader ReadFile GetStdHandle GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx CompareStringW LCMapStringW GetFileType CloseHandle GetConsoleMode ReadConsoleW SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP

Name

.text

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

143f20df3293bc1dbdfdf3cfac41e2598d57def221f0f7ad9c09894b7461add3

wininet

kernel32

generic