586fbc5f010859f68db7509ef58e22c894890b3c8e604eaad6b848e1362fe6a6

Sharing

Copy URL Twitter E-mail

General

Target
586fbc5f010859f68db7509ef58e22c894890b3c8e604eaad6b848e1362fe6a6
Size 94KB
Sample260804-gm1fkasdkf
SHA256 586fbc5f010859f68db7509ef58e22c894890b3c8e604eaad6b848e1362fe6a6
MD5 2ac0fa70e32f05f20559e5474cabc40a
SHA1 06687e4f609b4b318d34899fa966692e7ddd8889
SHA512 6721f92226755952b80e2ac424aa13c11eef85976f289989616c8759579fd3c2b283ba0832de331aaa8f7bb2a90dcd8eb7b3ec56cfb0deb5a3a6fcc26e0c7014
SSDEEP 1536:w0RYSncpTtzA1yJX+6/NThGSRlGdns7fKWhbfW6V59vJsWxT+Dcd9frbwqtOb:w0WScXAN6/NTFlGdnIfY6V59Qy9frbwT
TLSH
T16F935A5071E09075E6BF1A385870DA614B3EB920DDB0DDAF3792066E0F716C1EE35B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
586fbc5f010859f68db7509ef58e22c894890b3c8e604eaad6b848e1362fe6a6

File Explorer

586fbc5f010859f68db7509ef58e22c894890b3c8e604eaad6b848e1362fe6a6

.dll 94KB

586fbc5f010859f68db7509ef58e22c894890b3c8e604eaad6b848e1362fe6a6

IMPHASH d456061394a66732e6a84514117c3c23
SHA256 586fbc5f010859f68db7509ef58e22c894890b3c8e604eaad6b848e1362fe6a6
MD5 2ac0fa70e32f05f20559e5474cabc40a
SHA1 06687e4f609b4b318d34899fa966692e7ddd8889
SHA512 6721f92226755952b80e2ac424aa13c11eef85976f289989616c8759579fd3c2b283ba0832de331aaa8f7bb2a90dcd8eb7b3ec56cfb0deb5a3a6fcc26e0c7014
SSDEEP 1536:w0RYSncpTtzA1yJX+6/NThGSRlGdns7fKWhbfW6V59vJsWxT+Dcd9frbwqtOb:w0WScXAN6/NTFlGdnIfY6V59Qy9frbwT
TLSH
T16F935A5071E09075E6BF1A385870DA614B3EB920DDB0DDAF3792066E0F716C1EE35B2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13883

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\jenkins\workspace\windows-shared-oauth\MYGIT\installer\TixDll\Release\Win32\u\TixDll-u.pdb

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

netapi32

NetWkstaGetInfo NetApiBufferFree

kernel32

GetCurrentProcess RaiseException EncodePointer InterlockedFlushSList RtlUnwind GetEnvironmentStringsW FreeEnvironmentStringsW CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW GetTempFileNameW ReadFile SetFileTime GetTempPathW CloseHandle SetHandleInformation GetLastError CreatePipe WaitForSingleObject Sleep TerminateProcess GetExitCodeProcess CreateProcessW OpenProcess lstrcmpiW GetFileSize WriteFile HeapAlloc HeapFree GetProcessHeap CreateFileMappingW MapViewOfFile UnmapViewOfFile lstrlenW MoveFileW MultiByteToWideChar WideCharToMultiByte SearchPathW GetFileAttributesW HeapReAlloc FreeLibrary GetModuleHandleA GetProcAddress lstrcpynW lstrcatW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW DecodePointer ExitProcess GetModuleHandleExW GetModuleFileNameW SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx WriteConsoleW

user32

IsWindowVisible wsprintfW PostMessageW EnumWindows GetWindowThreadProcessId

ole32

CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

586fbc5f010859f68db7509ef58e22c894890b3c8e604eaad6b848e1362fe6a6

version

netapi32

kernel32

user32

ole32

generic