83145b23d36451dac1a61fa2240f4cd17b45e67203421473666f21fe02bf0bac

Sharing

Copy URL Twitter E-mail

General

Target
83145b23d36451dac1a61fa2240f4cd17b45e67203421473666f21fe02bf0bac
Size 9.3MB
Sample260802-cp2dessclf
SHA256 83145b23d36451dac1a61fa2240f4cd17b45e67203421473666f21fe02bf0bac
MD5 e8e3f0d416d7d2bd51dd31efc2449373
SHA1 e77a2f47e246f8d8f4fd0f937075c40a231890ad
SHA512 c2f8b1de32a1a82615e55ab865af84bd1a458887b94e9826af38c1ffe4b84ab718dbb8b6d27b9f3daaf411a81b754d8523763781f5012c9af786a9b6e781bd72
SSDEEP 196608:nc1kH+86fzD+SFY1ZTULaGg/u7wJxeI3/upE8z522ZT7OM6RG:ncL8u+H1mLLmu7CeIWpzz5pZ2G
TLSH
T1DAA61228BEC5C567DD3B5DB29A47D847E12B608C8285350B12B056A9DCF8DC85B03FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83145b23d36451dac1a61fa2240f4cd17b45e67203421473666f21fe02bf0bac

File Explorer

83145b23d36451dac1a61fa2240f4cd17b45e67203421473666f21fe02bf0bac

.exe 9.3MB

83145b23d36451dac1a61fa2240f4cd17b45e67203421473666f21fe02bf0bac

IMPHASH 004b53f07cf2a89daeb388e7867779d7
SHA256 83145b23d36451dac1a61fa2240f4cd17b45e67203421473666f21fe02bf0bac
MD5 e8e3f0d416d7d2bd51dd31efc2449373
SHA1 e77a2f47e246f8d8f4fd0f937075c40a231890ad
SHA512 c2f8b1de32a1a82615e55ab865af84bd1a458887b94e9826af38c1ffe4b84ab718dbb8b6d27b9f3daaf411a81b754d8523763781f5012c9af786a9b6e781bd72
SSDEEP 196608:nc1kH+86fzD+SFY1ZTULaGg/u7wJxeI3/upE8z522ZT7OM6RG:ncL8u+H1mLLmu7CeIWpzz5pZ2G
TLSH
T1DAA61228BEC5C567DD3B5DB29A47D847E12B608C8285350B12B056A9DCF8DC85B03FEE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

88657

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

SetLastError GetCurrentProcess GetNativeSystemInfo GetModuleFileNameW GetModuleHandleW GetProcAddress GetUserDefaultUILanguage FindClose FindFirstFileW GetLastError CreateProcessW GetFileAttributesW CreateFileW GetLocalTime AttachConsole HeapSize CloseHandle SetFilePointerEx GetFileSizeEx GetConsoleMode GetEnvironmentVariableW ReadFile ReadConsoleW SetEndOfFile FindNextFileW RtlUnwind WideCharToMultiByte MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetStringTypeW GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW TerminateProcess RaiseException WriteConsoleW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapReAlloc FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegCloseKey RegGetValueW

Name

.text

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

182KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

83145b23d36451dac1a61fa2240f4cd17b45e67203421473666f21fe02bf0bac

version

kernel32

user32

shell32

advapi32

generic