Список_запрос_на_проценку_от_040826_уложиться_в_7_700_000р.rar
- SHA256 c929725a664d65d9e9d3ebfc4adcceaf6408c6366aad2fcc8e5d18fff9334369
Static task
static1
1 signatures
General
- Target Список_запрос_на_проценку_от_040826_уложиться_в_7_700_000р.rar
- Size 223KB
- Sample260804-rfyy9sca22
- SHA256 c929725a664d65d9e9d3ebfc4adcceaf6408c6366aad2fcc8e5d18fff9334369
- MD5 aa811927be442330dbb0d320f58668b2
- SHA1 3de1bf6b8b2cdbdc67086df9ffdb5307a3bc7a41
- SHA512 939f36243e02066b2c49405296d0b2e9020229fb5662a15cbc42a4f6c417383f489ce050dd043624a2492803b29d76ffc307f6cddacef71e42a0d123ed17f8a2
- SSDEEP 6144:CgqnGUeb7owDMaEivF36NWVCJAVSSFh2+:LOGU2XtnvQNJAX
- TLSH T19C2423C9BE8037F29E8ACC0E423AF7B66601DFA455254A4677262714B1CE1A02FFF355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Список запрос на проценку от 040826.exe
File Explorer
-
Список_запрос_на_проценку_от_040826_уложиться_в_7_700_000р.rar.rar 223KB
-
kartochka-predpriyatia.jpg.jpg 90KB
-
Список запрос на проценку от 040826.exe.exe 326KB
kartochka-predpriyatia.jpg
- SHA256 1b87014e0dc6033a23be11bf21126c253a26b21e37a5e4c0c9f146b69c1134ee
- MD5 0c1c0080e1b6a5ded205071fec5dfd88
- SHA1 e3a12c053dc8642e5f08d2a0f8cec1aef6825a40
- SHA512 4fe777553edbcee65474cbcdbd6e4949cc8f974a15eacfc7a824b66c7997c62420a3f7e75c076501c76a8ff4c6cafeedead491afa05ed6e2e45488c82a70f553
- SSDEEP 1536:tHeHBzfLutbsVite56BhRTejeyyJzetO4Kj45xXYuNs8QN87X51h1h1OOEkiYZoE:hehbL0cipzRTejvFaCFzGL8b51h1h1OY
- TLSH T177930113E8B6DD8265FC8952CEE71F19486E241CBEE17045547DECEBFAD8101A83826D
- MD5 SHA1 SHA512 SSDEEP TLSH
Список запрос на проценку от 040826.exe
- IMPHASH 9c00054d041da26874cd2619d872dd9e
- SHA256 d0fea50476890756667e3fbfac3100c0c379a6c6568768dd11642aa58c60458d
- MD5 0b9c06dd7aee67e875d1ad5ca5512fda
- SHA1 2e05f36a34f94441cd7ab7c447c5226b2e10ee45
- SHA512 6ef4cbf46c795d1f0c39793deb13a782d12bf6be962b280280d27da5c8df136ce76ace5d1231c9f8db96f5c18d389ca2acd9e7cd1611362d879828cfa57ece09
- SSDEEP 6144:FCv1NDLsW/MTVJZ0XyL/tQ9uIawn2RXM:Y9CW/M5v0XyLuwIhEM
- TLSH T1B6647D2AF7A914FDD567D23CC8424906E772BC564760D6CF23A04AA63F236D09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
86168
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\danar\OneDrive\Рабочий стол\Sources\Add\pilower\x64\Release\pilower.pdb
kernel32
SetEndOfFile
CloseHandle
Sleep
WaitForSingleObject
GetCurrentProcess
GetTickCount
CreateProcessA
GetModuleFileNameA
WriteConsoleW
HeapSize
GetProcessHeap
SetStdHandle
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
GetLastError
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
GetExitCodeThread
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
WakeAllConditionVariable
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
SetConsoleCtrlHandler
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetFileType
HeapAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
advapi32
RegSetValueExA
OpenProcessToken
RegOpenKeyExA
GetTokenInformation
RegCloseKey
shell32
SHGetFolderPathA
ShellExecuteExA
urlmon
URLDownloadToFileW
Name
.text
Size
218KB
Virtual Size
218KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=179, id=261, version=30795,
count=16, id=260, version=30795,
count=10, id=259, version=34321,
count=16, id=260, version=34321,
count=93, id=261, version=34321,
count=9, id=257, version=30795,
count=164, id=1, productName=Unmarked objects,
count=1, id=265, version=34808,
count=1, id=255, version=34808,
count=1, id=258, version=34808,