374ddb565dfa843be8910577b00fe39ce1e197d26b27f0b0d5f1a2901fedd687

Sharing

Copy URL Twitter E-mail

General

Target
374ddb565dfa843be8910577b00fe39ce1e197d26b27f0b0d5f1a2901fedd687
Size 69KB
Sample260722-dpw95saa97
SHA256 374ddb565dfa843be8910577b00fe39ce1e197d26b27f0b0d5f1a2901fedd687
MD5 2285d3325b7123d86aaa1411de5009b9
SHA1 db3e001bd4754dbbf84607b212ebade7cdc13002
SHA512 0a1cfe7f0a4b229ba91e1f380db08bebd7b461f4f15dcbc69e2bc3441bf58dc4348ca5907a2d1d454e0f0da43f277cbdb5c3c5d10c01e77a63a99a317b6d2211
SSDEEP 768:hzLgv+Y+CtpyIqB8YvjuzIh5yowjyqQeBD8Ay9cv:pgmYTtpyIqBTjOEcyqQeBwav
TLSH
T16C63B65EB76520E7E975C078DA95530AB6B179A003311BDF10E028E82F716FE7C3CA59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
374ddb565dfa843be8910577b00fe39ce1e197d26b27f0b0d5f1a2901fedd687

File Explorer

374ddb565dfa843be8910577b00fe39ce1e197d26b27f0b0d5f1a2901fedd687

.exe 69KB

374ddb565dfa843be8910577b00fe39ce1e197d26b27f0b0d5f1a2901fedd687

IMPHASH c85fee17f42b65422d85a2128b83224a
SHA256 374ddb565dfa843be8910577b00fe39ce1e197d26b27f0b0d5f1a2901fedd687
MD5 2285d3325b7123d86aaa1411de5009b9
SHA1 db3e001bd4754dbbf84607b212ebade7cdc13002
SHA512 0a1cfe7f0a4b229ba91e1f380db08bebd7b461f4f15dcbc69e2bc3441bf58dc4348ca5907a2d1d454e0f0da43f277cbdb5c3c5d10c01e77a63a99a317b6d2211
SSDEEP 768:hzLgv+Y+CtpyIqB8YvjuzIh5yowjyqQeBD8Ay9cv:pgmYTtpyIqBTjOEcyqQeBwav
TLSH
T16C63B65EB76520E7E975C078DA95530AB6B179A003311BDF10E028E82F716FE7C3CA59
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70257

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\vs2022\fifo_test\x64\Debug\fifo_test.pdb

vcruntime140d

__vcrt_LoadLibraryExW __vcrt_GetModuleHandleW __vcrt_GetModuleFileNameW __current_exception_context __current_exception __std_type_info_destroy_list __C_specific_handler_noexcept __C_specific_handler memcpy memset

ucrtbased

_seh_filter_dll _execute_onexit_table _crt_atexit _crt_at_quick_exit terminate _wmakepath_s _wsplitpath_s wcscpy_s _initialize_onexit_table __stdio_common_vsprintf_s strcat_s strcpy_s __p__commode _set_new_mode _configthreadlocale _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_fmode _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __setusermatherr _set_app_type _seh_filter_exe _CrtDbgReportW _CrtDbgReport __stdio_common_vfprintf __acrt_iob_func _register_onexit_function

kernel32

GetStartupInfoW IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter GetProcAddress FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetLastError GetModuleHandleW GetCurrentThreadId InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

269B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

636B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

374ddb565dfa843be8910577b00fe39ce1e197d26b27f0b0d5f1a2901fedd687

vcruntime140d

ucrtbased

kernel32

generic