082deb47b598749e96e3b6dad95edf3ae5f7ed3921b9880d3b6c7fc4447b2aa4

Sharing

Copy URL Twitter E-mail

General

Target
082deb47b598749e96e3b6dad95edf3ae5f7ed3921b9880d3b6c7fc4447b2aa4
Size 873KB
Sample260723-vmljasgm41
SHA256 082deb47b598749e96e3b6dad95edf3ae5f7ed3921b9880d3b6c7fc4447b2aa4
MD5 446f24e57781eea17cdeeba74d4df6fe
SHA1 146f2a66439e16c629af5d71a48cb2abcdf8a36d
SHA512 b1af0213a5bc68c51df14dcc2fe07be89b23951159558acd0611b6b36725ffc6f60ef39cd0cc59a5934ba0b8316072621c3b3d298a59a6ab747a4be1287bff8b
SSDEEP 12288:7AhCbqadd7nfVbngtF3d0Q6faQFxSHp2F+fhwo1p:7AhCb/z7nferm22F+fhwo1p
TLSH
T1D115064226DB1CEADED32B7860D7633AA735FE608B7A4F7B8108C13168135D16D2BB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
082deb47b598749e96e3b6dad95edf3ae5f7ed3921b9880d3b6c7fc4447b2aa4

File Explorer

082deb47b598749e96e3b6dad95edf3ae5f7ed3921b9880d3b6c7fc4447b2aa4

.exe 873KB

082deb47b598749e96e3b6dad95edf3ae5f7ed3921b9880d3b6c7fc4447b2aa4

IMPHASH 2aea813d95050712ee000b070aa9f218
SHA256 082deb47b598749e96e3b6dad95edf3ae5f7ed3921b9880d3b6c7fc4447b2aa4
MD5 446f24e57781eea17cdeeba74d4df6fe
SHA1 146f2a66439e16c629af5d71a48cb2abcdf8a36d
SHA512 b1af0213a5bc68c51df14dcc2fe07be89b23951159558acd0611b6b36725ffc6f60ef39cd0cc59a5934ba0b8316072621c3b3d298a59a6ab747a4be1287bff8b
SSDEEP 12288:7AhCbqadd7nfVbngtF3d0Q6faQFxSHp2F+fhwo1p:7AhCb/z7nferm22F+fhwo1p
TLSH
T1D115064226DB1CEADED32B7860D7633AA735FE608B7A4F7B8108C13168135D16D2BB51
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5056

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

BitBlt CreateCompatibleDC CreateDIBSection CreatePen CreateSolidBrush DeleteDC DeleteObject GetStockObject LineTo MoveToEx Rectangle SelectObject SetBkMode SetStretchBltMode SetTextColor StretchBlt

kernel32

CloseHandle CreateEventA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FormatMessageA GetCommandLineW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetHandleInformation GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetStartupInfoW GetStdHandle GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW LocalFree MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile

msimg32

AlphaBlend

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _beginthreadex _cexit _commode _endthreadex _errno _fmode _initterm _read _setjmp _strdup _vscprintf _vsnprintf _wcmdln _write abort atexit calloc exit fprintf fputc fputs fputwc free fwprintf fwrite getenv localeconv longjmp malloc mbstowcs memchr memcmp memcpy memmove memset printf realloc signal strchr strcmp strerror strlen strncmp strtoul vfprintf wcslen

shell32

CommandLineToArgvW

user32

BeginPaint CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW DrawTextW EndPaint FillRect GetCapture GetDC GetMessageW GetSystemMetrics InvalidateRect LoadCursorW PostQuitMessage RegisterClassExW ReleaseCapture ReleaseDC SetCapture SetCursor SetFocus SetForegroundWindow SetWindowPos ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

082deb47b598749e96e3b6dad95edf3ae5f7ed3921b9880d3b6c7fc4447b2aa4

gdi32

kernel32

msimg32

msvcrt

shell32

user32

generic