944e1fb847fe0ec617965da76fa52979ba9e180dc77caad23d96c1244f36e8aa

General

Target
944e1fb847fe0ec617965da76fa52979ba9e180dc77caad23d96c1244f36e8aa
Size 683KB
Sample260722-v36jeaaa67
SHA256 944e1fb847fe0ec617965da76fa52979ba9e180dc77caad23d96c1244f36e8aa
MD5 c8ea3ce0a55d4d2b89529e19b4260d82
SHA1 dcfc111e36a4dbb4a8432a748b52faf38412f21d
SHA512 d620a0724102d9196a5953ed413e011fc4e980ab6f3b4b006f059ae00b9ee782b7ade814da7e5d138ca0cfb66a92c03c7938aefa27665ccd6b7c4f75c2522962
SSDEEP 12288:eTMTeFglBJKQFSe1RXmUWgiXhN9ZTMgEoo+8VMa:eTMTAGSIRXHu9Nlx8Wa
TLSH
T146E4A406F6E620E4E5B6C135AB7232AAFE7578A54734D7DB5680460B0B34BE4BD3E340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
944e1fb847fe0ec617965da76fa52979ba9e180dc77caad23d96c1244f36e8aa

File Explorer

944e1fb847fe0ec617965da76fa52979ba9e180dc77caad23d96c1244f36e8aa

.exe 683KB

944e1fb847fe0ec617965da76fa52979ba9e180dc77caad23d96c1244f36e8aa

IMPHASH 828bf6e4d83c34d4e89245555231d1cf
SHA256 944e1fb847fe0ec617965da76fa52979ba9e180dc77caad23d96c1244f36e8aa
MD5 c8ea3ce0a55d4d2b89529e19b4260d82
SHA1 dcfc111e36a4dbb4a8432a748b52faf38412f21d
SHA512 d620a0724102d9196a5953ed413e011fc4e980ab6f3b4b006f059ae00b9ee782b7ade814da7e5d138ca0cfb66a92c03c7938aefa27665ccd6b7c4f75c2522962
SSDEEP 12288:eTMTeFglBJKQFSe1RXmUWgiXhN9ZTMgEoo+8VMa:eTMTAGSIRXHu9Nlx8Wa
TLSH
T146E4A406F6E620E4E5B6C135AB7232AAFE7578A54734D7DB5680460B0B34BE4BD3E340
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

88448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetModuleFileNameA SizeofResource FindFirstFileA HeapFree SetLastError InitializeCriticalSectionEx FindClose HeapSize MultiByteToWideChar Sleep GetLastError GetFileAttributesA LoadLibraryA LockResource HeapReAlloc FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap WideCharToMultiByte CreateDirectoryA FindNextFileA GetEnvironmentVariableA ReadFile WriteFile SetFileTime SetFilePointer GetCurrentDirectoryA LocalFileTimeToFileTime CreateFileA CloseHandle SystemTimeToFileTime CreateFileW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW EnterCriticalSection LeaveCriticalSection EncodePointer LCMapStringEx GetStringTypeW GetCPInfo IsDebuggerPresent OutputDebugStringW RaiseException InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapValidate GetSystemInfo GetStdHandle GetCommandLineA GetCommandLineW GetFileType WriteConsoleW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW MoveFileExW HeapQueryInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadConsoleW FindFirstFileExW RtlUnwind

user32

wsprintfA

shell32

SHGetMalloc SHGetSpecialFolderLocation SHGetPathFromIDListA

Name

.text

Size

456KB

Virtual Size

456KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

944e1fb847fe0ec617965da76fa52979ba9e180dc77caad23d96c1244f36e8aa

kernel32

user32

shell32

generic