1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e

General

Target
1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e
Size 192KB
Sample260804-29pykasgnf
SHA256 1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e
MD5 22fc7a0cc51da9efdd12155ab8bd8b21
SHA1 abd51e3556758fab480acb922b5dbdd826eb5360
SHA512 4d2e85471f918ac884e63dbff426b013c25bf646c5a0b3e541ad7fe07100a1214390a17cb63fd0ba92f8cdf02cda08875e4b51fa7f7cbd35d2d0e9b1cf955944
SSDEEP 1536:Ei+hSp0ZMpxtj/UeWWpeKci+hSp0ZMpxtj/UeWWpeKci+hSp0ZMpxtj/UeWWpeK:rprEWpeKjprEWpeKjprEWpeK
TLSH
T1AA14C50BAB9164B5D6E6D6FD96AB07B1F232F285072211CF2344C5492DF0BC13B3D969
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e

File Explorer

1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e

.dll 192KB

1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e

IMPHASH 731efe418d4f3aaace580d0b2486d007
SHA256 1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e
MD5 22fc7a0cc51da9efdd12155ab8bd8b21
SHA1 abd51e3556758fab480acb922b5dbdd826eb5360
SHA512 4d2e85471f918ac884e63dbff426b013c25bf646c5a0b3e541ad7fe07100a1214390a17cb63fd0ba92f8cdf02cda08875e4b51fa7f7cbd35d2d0e9b1cf955944
SSDEEP 1536:Ei+hSp0ZMpxtj/UeWWpeKci+hSp0ZMpxtj/UeWWpeKci+hSp0ZMpxtj/UeWWpeK:rprEWpeKjprEWpeKjprEWpeK
TLSH
T1AA14C50BAB9164B5D6E6D6FD96AB07B1F232F285072211CF2344C5492DF0BC13B3D969
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

25744

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

BluetoothAddressToString BluetoothAuthenticateDeviceEx BluetoothDisconnectDevice BluetoothEnableDiscovery BluetoothEnableIncomingConnections BluetoothEnumerateInstalledServices BluetoothEnumerateInstalledServicesEx BluetoothEnumerateLocalServices BluetoothFindBrowseGroupClose BluetoothFindClassIdClose BluetoothFindDeviceClose BluetoothFindFirstBrowseGroup BluetoothFindFirstClassId BluetoothFindFirstDevice BluetoothFindFirstProfileDescriptor BluetoothFindFirstProtocolDescriptorStack BluetoothFindFirstProtocolEntry BluetoothFindFirstRadio BluetoothFindFirstService BluetoothFindFirstServiceEx BluetoothFindNextBrowseGroup BluetoothFindNextClassId BluetoothFindNextDevice BluetoothFindNextProfileDescriptor BluetoothFindNextProtocolDescriptorStack BluetoothFindNextProtocolEntry BluetoothFindNextRadio BluetoothFindNextService BluetoothFindProfileDescriptorClose BluetoothFindProtocolDescriptorStackClose BluetoothFindProtocolEntryClose BluetoothFindRadioClose BluetoothFindServiceClose BluetoothGATTAbortReliableWrite BluetoothGATTBeginReliableWrite BluetoothGATTEndReliableWrite BluetoothGATTGetCharacteristicValue BluetoothGATTGetCharacteristics BluetoothGATTGetDescriptorValue BluetoothGATTGetDescriptors BluetoothGATTGetIncludedServices BluetoothGATTGetServices BluetoothGATTRegisterEvent BluetoothGATTSetCharacteristicValue BluetoothGATTSetDescriptorValue BluetoothGATTUnregisterEvent BluetoothGetDeviceInfo BluetoothGetLocalServiceInfo BluetoothGetRadioInfo BluetoothGetServicePnpInstance BluetoothIsConnectable BluetoothIsDiscoverable BluetoothIsVersionAvailable BluetoothRegisterForAuthentication BluetoothRegisterForAuthenticationEx BluetoothRemoveDevice BluetoothSdpEnumAttributes BluetoothSdpGetAttributeValue BluetoothSdpGetContainerElementData BluetoothSdpGetElementData BluetoothSdpGetString BluetoothSendAuthenticationResponse BluetoothSendAuthenticationResponseEx BluetoothSetLocalServiceInfo BluetoothSetServiceState BluetoothSetServiceStateEx BluetoothUnregisterAuthentication BluetoothUpdateDeviceRecord BthpCheckForUnsupportedGuid BthpCleanupBRDeviceNode BthpCleanupDeviceLocalServices BthpCleanupDeviceRemoteServices BthpCleanupLEDeviceNodes BthpEnableAllServices BthpEnableConnectableAndDiscoverable BthpEnableRadioSoftware BthpFindPnpInfo BthpGATTCloseSession BthpInnerRecord BthpIsBluetoothServiceRunning BthpIsConnectableByDefault BthpIsDiscoverable BthpIsDiscoverableByDefault BthpIsRadioSoftwareEnabled BthpIsTopOfServiceGroup BthpMapStatusToErr BthpNextRecord BthpRegisterForAuthentication BthpSetServiceState BthpSetServiceStateEx BthpTranspose16Bits BthpTranspose32Bits BthpTransposeAndExtendBytes DllCanUnloadNow FindNextOpenVCOMPort InstallIncomingComPort ShouldForceAuthentication

Name

.text

Size

24KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e

setupapi

cfgmgr32

user32

ucrtbase

kernel32

ntdll

generic

Sharing

General

Malware Config

Signatures

File Explorer

1b71c20139f75c8ccac5be954ad15891a5681034295154168bf380776356020e

setupapi

cfgmgr32

user32

ucrtbase

kernel32

ntdll

generic