94afeea2bb5e4f71130dcf04a6f94fa083c70cfd32803fdf0df9e608ee04e13a

Sharing

Copy URL Twitter E-mail

General

Target
94afeea2bb5e4f71130dcf04a6f94fa083c70cfd32803fdf0df9e608ee04e13a
Size 1.5MB
Sample260723-qcaa3azbmd
SHA256 94afeea2bb5e4f71130dcf04a6f94fa083c70cfd32803fdf0df9e608ee04e13a
MD5 a2df5576215f117fab93456b18968890
SHA1 c344f903af49afc3766ee0de6419bc587ffeea1f
SHA512 2ad3b1921f9a29525bba5d3a48c22a4b803b373ff3940222221e0d6f65f029b517f96f9f9ac309767dcbc65b1d99961f6bf8a929d8a06537c7c8f8d5e89e0270
SSDEEP 12288:y4gjskV8JPiME/lspl2aQMoMOAPqQBnEC+/12SpOoqiXhyqbvTqMXkEOAxS5:ylsTE/lspJ+/1Aocqb37JxS
TLSH
T1FE75A54BEBB650D1F5BAC139D552223AFC723CA1873897D792856A0A1B30FE4AD7D700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94afeea2bb5e4f71130dcf04a6f94fa083c70cfd32803fdf0df9e608ee04e13a

File Explorer

94afeea2bb5e4f71130dcf04a6f94fa083c70cfd32803fdf0df9e608ee04e13a

.exe 1.5MB

94afeea2bb5e4f71130dcf04a6f94fa083c70cfd32803fdf0df9e608ee04e13a

IMPHASH 8fcb87ae2111084675a7860b39b496fb
SHA256 94afeea2bb5e4f71130dcf04a6f94fa083c70cfd32803fdf0df9e608ee04e13a
MD5 a2df5576215f117fab93456b18968890
SHA1 c344f903af49afc3766ee0de6419bc587ffeea1f
SHA512 2ad3b1921f9a29525bba5d3a48c22a4b803b373ff3940222221e0d6f65f029b517f96f9f9ac309767dcbc65b1d99961f6bf8a929d8a06537c7c8f8d5e89e0270
SSDEEP 12288:y4gjskV8JPiME/lspl2aQMoMOAPqQBnEC+/12SpOoqiXhyqbvTqMXkEOAxS5:ylsTE/lspJ+/1Aocqb37JxS
TLSH
T1FE75A54BEBB650D1F5BAC139D552223AFC723CA1873897D792856A0A1B30FE4AD7D700
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

584221

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\ikuna\source\repos\FreeDownloader-master\x64\Debug\FreeDownloader.pdb

kernel32

GetCurrentThreadId IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetProcAddress RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RtlPcToFileHeader GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetDriveTypeW GetFullPathNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapSize HeapValidate GetSystemInfo IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter GetTempPathW IsThreadAFiber VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle GetCurrentThread WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW SetCurrentDirectoryW GetCurrentDirectoryW OutputDebugStringW WriteConsoleW SetConsoleCtrlHandler FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW HeapReAlloc HeapQueryInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode CreateFileW GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW SetEndOfFile RtlUnwind

Name

.textbss

Size

Virtual Size

557KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

281B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

1024B

Virtual Size

563B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

81KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

94afeea2bb5e4f71130dcf04a6f94fa083c70cfd32803fdf0df9e608ee04e13a

kernel32

generic