725a37eb9c3bae4b5efb638362e049484e7267e3bc5525072b4f8a6c4095b25a

General

Target
725a37eb9c3bae4b5efb638362e049484e7267e3bc5525072b4f8a6c4095b25a
Size 325KB
Sample260802-tkjq9astbt
SHA256 725a37eb9c3bae4b5efb638362e049484e7267e3bc5525072b4f8a6c4095b25a
MD5 d9a2462d2942f3433468eeed844a4546
SHA1 00543711315c1aceb5778acaf37ed9f0385f11a2
SHA512 2f6d4cbf1ccad2b473b2e463ab6603c6d0fa1129c410559e1bb21df6950d742408e3717d9cda0e9907e0e20a31429e87f08ca9668b2c3930d346c95edc532f61
SSDEEP 3072:Jb3jx5+je+2vTJXpevkNLAc7NVJk+YRBLCIApBB6/CmbUORf2QGziXnrs+t25JUM:h3B+2v1Xpev2f6RBLHS6C0sQqe
TLSH
T192648F03A6EC3CEAD1368674AB7743C1DB2EEC5147A1D58F03D006968E3E5937A3A791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
725a37eb9c3bae4b5efb638362e049484e7267e3bc5525072b4f8a6c4095b25a

File Explorer

725a37eb9c3bae4b5efb638362e049484e7267e3bc5525072b4f8a6c4095b25a

.exe 325KB

725a37eb9c3bae4b5efb638362e049484e7267e3bc5525072b4f8a6c4095b25a

IMPHASH 200ed552443ec6a0b57bb267ec68b700
SHA256 725a37eb9c3bae4b5efb638362e049484e7267e3bc5525072b4f8a6c4095b25a
MD5 d9a2462d2942f3433468eeed844a4546
SHA1 00543711315c1aceb5778acaf37ed9f0385f11a2
SHA512 2f6d4cbf1ccad2b473b2e463ab6603c6d0fa1129c410559e1bb21df6950d742408e3717d9cda0e9907e0e20a31429e87f08ca9668b2c3930d346c95edc532f61
SSDEEP 3072:Jb3jx5+je+2vTJXpevkNLAc7NVJk+YRBLCIApBB6/CmbUORf2QGziXnrs+t25JUM:h3B+2v1Xpev2f6RBLHS6C0sQqe
TLSH
T192648F03A6EC3CEAD1368674AB7743C1DB2EEC5147A1D58F03D006968E3E5937A3A791
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

40832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

MultiByteToWideChar GetLastError CloseHandle CreateThread SetCurrentDirectoryW CreateProcessW GetExitCodeProcess SetEndOfFile WriteConsoleW HeapSize CreateFileW GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WaitForSingleObject FindNextFileW FindFirstFileExW FindClose HeapReAlloc GetOEMCP GetACP IsValidCodePage ReadConsoleW ReadFile EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetCommandLineA GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent GetStdHandle WriteFile GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileSizeEx SetFilePointerEx GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree HeapAlloc VirtualProtect LoadLibraryExW RtlUnwind

user32

DefWindowProcW GetSystemMenu ModifyMenuW GetWindowRect SetWindowPos MessageBoxW CreateWindowExW SendMessageW EndDialog GetSystemMetrics RegisterClassExW LoadAcceleratorsW GetMessageW ShowWindow DispatchMessageW MessageBoxTimeoutW TranslateAcceleratorW TranslateMessage LoadIconW LoadCursorW GetClientRect PostQuitMessage DialogBoxParamW UpdateWindow BeginPaint EndPaint LoadStringW

gdi32

TextOutW

Name

.text

Size

142KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

93KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

725a37eb9c3bae4b5efb638362e049484e7267e3bc5525072b4f8a6c4095b25a

kernel32

user32

gdi32

generic