b660f1d4c47dcd76c5402f7013f68512e5d490976628c093df0bef72753f34a3

Sharing

Copy URL Twitter E-mail

General

Target
b660f1d4c47dcd76c5402f7013f68512e5d490976628c093df0bef72753f34a3
Size 137KB
Sample260803-drnqsabd88
SHA256 b660f1d4c47dcd76c5402f7013f68512e5d490976628c093df0bef72753f34a3
MD5 6538d8489273682b5bc94b200fea74b0
SHA1 7df73a51a182d960e2787e08c269745ceaf8b219
SHA512 a7c090f459b33934b8eebec96f8b7078e4f8758f0b1430f809fdf4f5cf4329610f1fc9a2657b2fc531bc3f3a44c37f19a7d9d3136d198f37452091f383c7ba17
SSDEEP 1536:WS41TwtFx0mfJSyhr9BoGGQhhumPcJvTQcyHb9F2eFa9V01fZa5D24YD10AJBuZc:WS45wh0itPvVu/1TuHda9V01fZaHb
TLSH
T110D36D13764061FDD44AC07482558AB7B37270D91F329BFF13A516382EAAAE76F3C624
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b660f1d4c47dcd76c5402f7013f68512e5d490976628c093df0bef72753f34a3

File Explorer

b660f1d4c47dcd76c5402f7013f68512e5d490976628c093df0bef72753f34a3

.exe 137KB

b660f1d4c47dcd76c5402f7013f68512e5d490976628c093df0bef72753f34a3

IMPHASH 6a940b8fe4134f44202ffde9492feec8
SHA256 b660f1d4c47dcd76c5402f7013f68512e5d490976628c093df0bef72753f34a3
MD5 6538d8489273682b5bc94b200fea74b0
SHA1 7df73a51a182d960e2787e08c269745ceaf8b219
SHA512 a7c090f459b33934b8eebec96f8b7078e4f8758f0b1430f809fdf4f5cf4329610f1fc9a2657b2fc531bc3f3a44c37f19a7d9d3136d198f37452091f383c7ba17
SSDEEP 1536:WS41TwtFx0mfJSyhr9BoGGQhhumPcJvTQcyHb9F2eFa9V01fZa5D24YD10AJBuZc:WS45wh0itPvVu/1TuHda9V01fZaHb
TLSH
T110D36D13764061FDD44AC07482558AB7B37270D91F329BFF13A516382EAAAE76F3C624
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

93808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-beeba314b8ba1260.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memset __current_exception_context memcpy _CxxThrowException __C_specific_handler __current_exception memmove memcmp __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

b660f1d4c47dcd76c5402f7013f68512e5d490976628c093df0bef72753f34a3

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic