0faf70c95caee397702bf8ef58250806d6f5f4e4c915f609a4a8bc73f58cc19d

Sharing

Copy URL Twitter E-mail

General

Target
0faf70c95caee397702bf8ef58250806d6f5f4e4c915f609a4a8bc73f58cc19d
Size 1.0MB
Sample260721-ev1eesf121
SHA256 0faf70c95caee397702bf8ef58250806d6f5f4e4c915f609a4a8bc73f58cc19d
MD5 9d0e37f1c866ce40791e77fde43fedd7
SHA1 8c1330b209e98aa6eec2eef5555eb462e1f2eaeb
SHA512 3b08c12abb9ee5397e47add6e65b71ea1c0f775d43e49cf3b0038c0921092b42dfccfd82614f09928b6ac84e4a6ccd9534414d4164d602a2ab164d3de59dcc75
SSDEEP 24576:iuserzd0gaqYhj/V6YYeEOq9p6IrnDNYrkz44W/zpoN:ipCd07qwYYY5h6IrnXz444z
TLSH
T1C3359C31B9825432DB91003591B86FBE0DEC54361F9C67E793A4EABD4DB80C221B97DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0faf70c95caee397702bf8ef58250806d6f5f4e4c915f609a4a8bc73f58cc19d

File Explorer

0faf70c95caee397702bf8ef58250806d6f5f4e4c915f609a4a8bc73f58cc19d

.exe 1.0MB

0faf70c95caee397702bf8ef58250806d6f5f4e4c915f609a4a8bc73f58cc19d

IMPHASH ec41cf3923218c9f5ae206c193301ec1
SHA256 0faf70c95caee397702bf8ef58250806d6f5f4e4c915f609a4a8bc73f58cc19d
MD5 9d0e37f1c866ce40791e77fde43fedd7
SHA1 8c1330b209e98aa6eec2eef5555eb462e1f2eaeb
SHA512 3b08c12abb9ee5397e47add6e65b71ea1c0f775d43e49cf3b0038c0921092b42dfccfd82614f09928b6ac84e4a6ccd9534414d4164d602a2ab164d3de59dcc75
SSDEEP 24576:iuserzd0gaqYhj/V6YYeEOq9p6IrnDNYrkz44W/zpoN:ipCd07qwYYY5h6IrnXz444z
TLSH
T1C3359C31B9825432DB91003591B86FBE0DEC54361F9C67E793A4EABD4DB80C221B97DE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

495546

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\TamoSys\program\Obj\Release\Game.pdb

kernel32

GetPrivateProfileIntA MoveFileA FindFirstFileA OutputDebugStringA FindNextFileA SetFilePointer FindClose SetCurrentDirectoryA Sleep GetTempPathA CreateFileA GetVersionExA DeleteFileA GlobalAlloc lstrcpyA GlobalFree WritePrivateProfileStringA GlobalLock GetFileSize GlobalMemoryStatusEx GetDiskFreeSpaceExA GlobalUnlock SetFileTime CopyFileA FileTimeToSystemTime FileTimeToLocalFileTime GetFileTime GetLocalTime VirtualProtect GetSystemInfo CreateSemaphoreA FreeLibrary DecodePointer WriteConsoleW GetProcAddress ReadConsoleW SetEndOfFile HeapReAlloc HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers CreateFileW SetStdHandle CreateThread WaitForSingleObjectEx OutputDebugStringW SetConsoleCtrlHandler GetProcessHeap SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW LoadLibraryA GetLastError LoadLibraryExA GetModuleFileNameA GetPrivateProfileStringA GetEnvironmentVariableA lstrlenA GetDateFormatW GetStringTypeW GetFileType GetDriveTypeA CloseHandle WriteFile SetFilePointerEx ReadFile HeapFree HeapAlloc GetCurrentThread GetACP GetStdHandle WideCharToMultiByte MultiByteToWideChar GetModuleFileNameW VirtualQuery GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue GetLogicalDrives GetVolumeInformationA CreateDirectoryA GetCurrentProcess GetModuleHandleA IsWow64Process UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException InterlockedPushEntrySList InterlockedFlushSList SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc

user32

GetMonitorInfoA SetRect DispatchMessageA LoadCursorA IsDialogMessageA GetWindowLongA RegisterClassA TranslateMessage LoadIconA PeekMessageA UnregisterClassA PostQuitMessage DefDlgProcA GetAsyncKeyState WINNLSEnableIME MonitorFromPoint GetWindowRect DestroyWindow wsprintfA EndDialog GetSystemMetrics MessageBeep DialogBoxParamA ShowWindow GetDlgItemTextA GetWindowTextA SetWindowPos MoveWindow CreateWindowExA SetFocus SetDlgItemTextA SendMessageA GetDlgItem UpdateWindow EnableWindow SetWindowTextA GetActiveWindow FindWindowA ReleaseDC GetDesktopWindow CreateIconIndirect EnumDisplayMonitors GetDC MessageBoxA

gdi32

CreateDIBSection CreateFontIndirectA DeleteObject CreateBitmap GetStockObject

comdlg32

GetOpenFileNameA GetSaveFileNameA

shell32

SHGetSpecialFolderPathA SHGetFileInfoA SHBrowseForFolderA SHGetPathFromIDListA ShellExecuteA

imm32

ImmSetOpenStatus ImmGetContext ImmReleaseContext ImmSetConversionStatus

winmm

timeGetTime

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

shlwapi

PathFileExistsA PathAddExtensionA PathIsDirectoryA PathUnquoteSpacesA PathRenameExtensionA PathRemoveFileSpecA

sensapi

IsNetworkAlive

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

0faf70c95caee397702bf8ef58250806d6f5f4e4c915f609a4a8bc73f58cc19d

kernel32

user32

gdi32

comdlg32

shell32

imm32

winmm

version

shlwapi

sensapi

ole32

generic