1cd4050fff7b949990e77d221be26f5ef5f48d1a4be387266d9dfd45a41ed780

General

Target
1cd4050fff7b949990e77d221be26f5ef5f48d1a4be387266d9dfd45a41ed780
Size 856KB
Sample260804-22tlsasepg
SHA256 1cd4050fff7b949990e77d221be26f5ef5f48d1a4be387266d9dfd45a41ed780
MD5 f13ef4227875619ce39971088235cff3
SHA1 eb6b6f89735b79982ef1360c3abb3f53e600cb24
SHA512 1c2305703aba5967c35a949d401414def804bce1d12dfeb9cb2e1ff61ecb6d23a08c5a1516feeb8647794790949a484eb550bc405b6f74d31719d61d7bcd5740
SSDEEP 3072:wK6rtRG6eOK6rtRG6eOK6rtRG6eJbAd9HJIbAd9HJ9fW55TbUpn6A55TbUpn6nxy:wKjbOKjbOKjbUfyYXY
TLSH
T1F315675213EA5109F2F37B795DBA44584F2BBCA2AB76C18F119C412E4FB3AC09974732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cd4050fff7b949990e77d221be26f5ef5f48d1a4be387266d9dfd45a41ed780

File Explorer

1cd4050fff7b949990e77d221be26f5ef5f48d1a4be387266d9dfd45a41ed780

.exe 856KB

1cd4050fff7b949990e77d221be26f5ef5f48d1a4be387266d9dfd45a41ed780

IMPHASH b7fe7eeac6188c466d47bf94821f4464
SHA256 1cd4050fff7b949990e77d221be26f5ef5f48d1a4be387266d9dfd45a41ed780
MD5 f13ef4227875619ce39971088235cff3
SHA1 eb6b6f89735b79982ef1360c3abb3f53e600cb24
SHA512 1c2305703aba5967c35a949d401414def804bce1d12dfeb9cb2e1ff61ecb6d23a08c5a1516feeb8647794790949a484eb550bc405b6f74d31719d61d7bcd5740
SSDEEP 3072:wK6rtRG6eOK6rtRG6eOK6rtRG6eJbAd9HJIbAd9HJ9fW55TbUpn6A55TbUpn6nxy:wKjbOKjbOKjbUfyYXY
TLSH
T1F315675213EA5109F2F37B795DBA44584F2BBCA2AB76C18F119C412E4FB3AC09974732
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

28512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteTreeW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf __stdio_common_vswprintf _configure_wide_argv _crt_atexit _errno _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wcsdup _wcsicmp _wcsnicmp _wcstoui64 _wcsupr _wfopen exit fclose fread free fwrite getenv iswspace iswxdigit malloc memmove realloc strchr strcmp strcpy strcspn strlen strpbrk towlower towupper wcschr wcslen wcsncmp wcspbrk wcsrchr wcstoul

kernel32

CloseHandle CreateFileW DelayLoadFailureHook FormatMessageW GetModuleHandleW GetOEMCP GetProcAddress GetStdHandle GetTickCount HeapAlloc HeapReAlloc IsBadStringPtrW LocalFree MultiByteToWideChar ReadConsoleW ResolveDelayLoadedAPI WideCharToMultiByte WriteConsoleW WriteFile lstrcmpW lstrcmpiW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

1cd4050fff7b949990e77d221be26f5ef5f48d1a4be387266d9dfd45a41ed780

advapi32

ucrtbase

kernel32

ntdll

generic