91500daab42f9e7e47b67cd9f732983011e6f797a6fea8681327029982c8d766

Sharing

Copy URL Twitter E-mail

General

Target
91500daab42f9e7e47b67cd9f732983011e6f797a6fea8681327029982c8d766
Size 192KB
Sample260803-drnqsabd87
SHA256 91500daab42f9e7e47b67cd9f732983011e6f797a6fea8681327029982c8d766
MD5 6504b7377475d234cbe6bcaaaee57621
SHA1 054cf01c860c78df6abe8dfd61d9d0789cefd2c6
SHA512 95443873d2332d073d176ae41ee87f9b6d1e1615f5e01fd27e26b7f4ba3793c3c8321ac81febdeb338461f86a1066c4d0c8cb5362b7b0d7b6690dd326dc44734
SSDEEP 1536:LOqYnICcdalbp81u2QvE9CQ03kV4XNP9w53sQAsFkm5FMr1gwqNe9e/VXryWZgtk:LOwaVeFbB03N1oQGkT1uNLryFVYOn/w
TLSH
T1CC143B1276A491FDD47BC03882568E66B53270D60F31AAFF0695423C2F65EF9AE3C724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91500daab42f9e7e47b67cd9f732983011e6f797a6fea8681327029982c8d766

File Explorer

91500daab42f9e7e47b67cd9f732983011e6f797a6fea8681327029982c8d766

.exe 192KB

91500daab42f9e7e47b67cd9f732983011e6f797a6fea8681327029982c8d766

IMPHASH 88bcc5bcc3e8e54119ff052935fd53dc
SHA256 91500daab42f9e7e47b67cd9f732983011e6f797a6fea8681327029982c8d766
MD5 6504b7377475d234cbe6bcaaaee57621
SHA1 054cf01c860c78df6abe8dfd61d9d0789cefd2c6
SHA512 95443873d2332d073d176ae41ee87f9b6d1e1615f5e01fd27e26b7f4ba3793c3c8321ac81febdeb338461f86a1066c4d0c8cb5362b7b0d7b6690dd326dc44734
SSDEEP 1536:LOqYnICcdalbp81u2QvE9CQ03kV4XNP9w53sQAsFkm5FMr1gwqNe9e/VXryWZgtk:LOwaVeFbB03N1oQGkT1uNLryFVYOn/w
TLSH
T1CC143B1276A491FDD47BC03882568E66B53270D60F31AAFF0695423C2F65EF9AE3C724
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

132896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-a3f3a3c9c92b8c25.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead CloseHandle GetLastError WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context memmove _CxxThrowException __C_specific_handler __current_exception memset memcpy __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

91500daab42f9e7e47b67cd9f732983011e6f797a6fea8681327029982c8d766

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic