ce1da4a5ca2a445e3fb6cf5efa1f3866226a01a0aaac4fb0e9c0f3baa3e38f59

General

Target
ce1da4a5ca2a445e3fb6cf5efa1f3866226a01a0aaac4fb0e9c0f3baa3e38f59
Size 271KB
Sample260804-d9ln5scd98
SHA256 ce1da4a5ca2a445e3fb6cf5efa1f3866226a01a0aaac4fb0e9c0f3baa3e38f59
MD5 8827d54624637923dac5ecf2627b178e
SHA1 8d3fc48661203861de8919fe535eb03fc281b776
SHA512 75029d718280e23bb6ac2bcf962723c883e4d4675ebc218ea9b0b638bdd8e5df4aeca89fc7f44897580b992509416765ce8172432784c421b25091fb9d114a2e
SSDEEP 6144:FZsGZqLtA9IayLWysqLkOdyBceinrj/wGAJB7C:gGZwtAu5dyBcJrrwzr7
TLSH
T13D443B3063E840F5F19FC4B85A1299E6CEF2695683F0F98B17E04F891F272641AB7752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce1da4a5ca2a445e3fb6cf5efa1f3866226a01a0aaac4fb0e9c0f3baa3e38f59

File Explorer

ce1da4a5ca2a445e3fb6cf5efa1f3866226a01a0aaac4fb0e9c0f3baa3e38f59

.dll 271KB

ce1da4a5ca2a445e3fb6cf5efa1f3866226a01a0aaac4fb0e9c0f3baa3e38f59

IMPHASH 7c852993875940d59214faec6956623e
SHA256 ce1da4a5ca2a445e3fb6cf5efa1f3866226a01a0aaac4fb0e9c0f3baa3e38f59
MD5 8827d54624637923dac5ecf2627b178e
SHA1 8d3fc48661203861de8919fe535eb03fc281b776
SHA512 75029d718280e23bb6ac2bcf962723c883e4d4675ebc218ea9b0b638bdd8e5df4aeca89fc7f44897580b992509416765ce8172432784c421b25091fb9d114a2e
SSDEEP 6144:FZsGZqLtA9IayLWysqLkOdyBceinrj/wGAJB7C:gGZwtAu5dyBcJrrwzr7
TLSH
T13D443B3063E840F5F19FC4B85A1299E6CEF2695683F0F98B17E04F891F272641AB7752
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

118088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

OutputDebugStringA DebugBreak CreateThread WaitForSingleObject TerminateThread CloseHandle Sleep WideCharToMultiByte CreatePipe CreateProcessA ReadFile CreateFileA WriteFile WriteConsoleW CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap GetStringTypeW SetStdHandle

wininet

InternetOpenA InternetCloseHandle InternetReadFile HttpSendRequestA HttpOpenRequestA InternetConnectA InternetCrackUrlA

ws2_32

inet_ntop

Name

.text

Size

198KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ce1da4a5ca2a445e3fb6cf5efa1f3866226a01a0aaac4fb0e9c0f3baa3e38f59

kernel32

wininet

ws2_32

generic