429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f

General

Target
429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f
Size 364KB
Sample260731-xwl8asfd39
SHA256 429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f
MD5 3f7063e36eba9288d07c4efe0c90c3a0
SHA1 43df65d509e97bde9b1d03d098e0e47382e62810
SHA512 0bafbf2d28ee7c8d817102f2455c6e2ed5050950d215d808ea0bf658749cb74ae6b1019dbc5606da377c88059ad24284571b912d3117c0d5449ea5bb6f227fa1
SSDEEP 6144:dAvGPMkclMQUjSnQQReyyu1ZKoE42K5yyAkHqzszHTBlXqHcWs:dv0/KQUjfQ0yyu1ZKoE421kHasjTHXqI
TLSH
T1F2849E40B2C344FAC59A193415ADB33A5E2C26154B24DDEBFAC88DB796333C258727DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f

File Explorer

429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f

.dll 364KB

429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f

IMPHASH 9ee396e2a7e628952c4a6d7bdc25e042
SHA256 429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f
MD5 3f7063e36eba9288d07c4efe0c90c3a0
SHA1 43df65d509e97bde9b1d03d098e0e47382e62810
SHA512 0bafbf2d28ee7c8d817102f2455c6e2ed5050950d215d808ea0bf658749cb74ae6b1019dbc5606da377c88059ad24284571b912d3117c0d5449ea5bb6f227fa1
SSDEEP 6144:dAvGPMkclMQUjSnQQReyyu1ZKoE42K5yyAkHqzszHTBlXqHcWs:dv0/KQUjfQ0yyu1ZKoE421kHasjTHXqI
TLSH
T1F2849E40B2C344FAC59A193415ADB33A5E2C26154B24DDEBFAC88DB796333C258727DE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

227173

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

AnsiToUnicode AnsiToUtf8Bytes AnsiToUtf8Str UnicodeToAnsi Utf8ToAnsi unsafe_yyjson_equals unsafe_yyjson_get_pointer unsafe_yyjson_mut_equals unsafe_yyjson_mut_get_pointer unsafe_yyjson_str_pool_grow unsafe_yyjson_val_pool_grow yj_arr_equals_str yj_arr_get yj_arr_get_bool yj_arr_get_double yj_arr_get_int yj_arr_get_int64 yj_arr_get_num_type yj_arr_get_str yj_arr_get_type yj_arr_iter_init yj_arr_iter_next yj_doc_free yj_doc_get_read_size yj_doc_get_val_count yj_equals_str yj_equals_str_pointer yj_equals_val_str yj_equals_val_val yj_get_bool yj_get_bool_pointer yj_get_double yj_get_double_pointer yj_get_int yj_get_int64 yj_get_int64_pointer yj_get_int_pointer yj_get_num_type yj_get_num_type_pointer yj_get_obj yj_get_obj_pointer yj_get_size yj_get_size_pointer yj_get_str yj_get_str_pointer yj_get_struct_size yj_get_type yj_get_type_pointer yj_get_val_bool yj_get_val_double yj_get_val_int yj_get_val_int64 yj_get_val_json yj_get_val_num_type yj_get_val_size yj_get_val_str yj_get_val_type yj_mut_arr_clear yj_mut_arr_equals_str yj_mut_arr_get yj_mut_arr_get_bool yj_mut_arr_get_double yj_mut_arr_get_int yj_mut_arr_get_int64 yj_mut_arr_get_num_type yj_mut_arr_get_str yj_mut_arr_get_type yj_mut_arr_iter_init yj_mut_arr_iter_next yj_mut_arr_remove_range yj_mut_arr_rotate yj_mut_arr_set_bool yj_mut_arr_set_duoble yj_mut_arr_set_im_obj_obj yj_mut_arr_set_im_val yj_mut_arr_set_int yj_mut_arr_set_int64 yj_mut_arr_set_json yj_mut_arr_set_mut_val yj_mut_arr_set_narr yj_mut_arr_set_nobj yj_mut_arr_set_null yj_mut_arr_set_str yj_mut_doc_free yj_mut_doc_get_json yj_mut_equals_str yj_mut_equals_str_pointer yj_mut_equals_val_str yj_mut_equals_val_val yj_mut_get_bool yj_mut_get_bool_pointer yj_mut_get_double yj_mut_get_double_pointer yj_mut_get_int yj_mut_get_int64 yj_mut_get_int64_pointer yj_mut_get_int_pointer yj_mut_get_malloc_count yj_mut_get_num_type yj_mut_get_num_type_pointer yj_mut_get_obj yj_mut_get_obj_pointer yj_mut_get_size yj_mut_get_size_pointer yj_mut_get_str yj_mut_get_str_pointer yj_mut_get_type yj_mut_get_type_pointer yj_mut_get_val_bool yj_mut_get_val_double yj_mut_get_val_int yj_mut_get_val_int64 yj_mut_get_val_json yj_mut_get_val_num_type yj_mut_get_val_size yj_mut_get_val_str yj_mut_get_val_type yj_mut_new yj_mut_obj_clear yj_mut_obj_get yj_mut_obj_get_key yj_mut_obj_iter_get yj_mut_obj_iter_init yj_mut_obj_iter_next yj_mut_obj_remove yj_mut_obj_rotate yj_mut_obj_set_bool yj_mut_obj_set_duoble yj_mut_obj_set_im_obj_obj yj_mut_obj_set_im_val yj_mut_obj_set_int yj_mut_obj_set_int64 yj_mut_obj_set_json yj_mut_obj_set_mut_val yj_mut_obj_set_narr yj_mut_obj_set_nobj yj_mut_obj_set_null yj_mut_obj_set_str yj_mut_parse_file yj_mut_parse_str yj_mut_pointer_get_bool_config yj_mut_pointer_get_duoble_config yj_mut_pointer_get_int64_config yj_mut_pointer_get_int_config yj_mut_pointer_get_str_config yj_mut_pointer_remove yj_mut_pointer_set_bool yj_mut_pointer_set_duoble yj_mut_pointer_set_im_obj_obj yj_mut_pointer_set_im_val yj_mut_pointer_set_int yj_mut_pointer_set_int64 yj_mut_pointer_set_json yj_mut_pointer_set_mut_val yj_mut_pointer_set_narr yj_mut_pointer_set_nobj yj_mut_pointer_set_null yj_mut_pointer_set_str yj_mut_pointer_swap_val yj_mut_set_val_bool yj_mut_set_val_duoble yj_mut_set_val_im_obj_obj yj_mut_set_val_im_val yj_mut_set_val_int yj_mut_set_val_int64 yj_mut_set_val_json yj_mut_set_val_mut_val yj_mut_set_val_narr yj_mut_set_val_nobj yj_mut_set_val_null yj_mut_set_val_str yj_mut_swap_val yj_mut_val_new yj_obj_get yj_obj_get_key yj_obj_iter_get yj_obj_iter_init yj_obj_iter_next yj_parse_file yj_parse_str yj_read_err_get yj_val_mut_new yyjson_alc_pool_init yyjson_doc_mut_copy yyjson_merge_patch yyjson_mut_doc_free yyjson_mut_doc_mut_copy yyjson_mut_doc_new yyjson_mut_val_mut_copy yyjson_mut_val_write_file yyjson_mut_val_write_opts yyjson_mut_write_file yyjson_mut_write_opts yyjson_read_file yyjson_read_opts yyjson_val_mut_copy yyjson_val_write_file yyjson_val_write_opts yyjson_version yyjson_write_file yyjson_write_opts zlib_compress zlib_compress_size zlib_uncompress zlib_uncompress_deflate

Name

.text

Size

275KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

71KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.voltbl

Size

512B

Virtual Size

4KB

Characteristics

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

429327d4316fe413eba4269a88aef36c77a7cfc31a44577f368dd7473d753b5f

kernel32

generic