1be8d741c1a74a88393686cbd19d446347d4bbe416f56142db44894dd5af3f10

Sharing

Copy URL Twitter E-mail

General

Target
1be8d741c1a74a88393686cbd19d446347d4bbe416f56142db44894dd5af3f10
Size 9.3MB
Sample260805-bkn2vsgr7z
SHA256 1be8d741c1a74a88393686cbd19d446347d4bbe416f56142db44894dd5af3f10
MD5 0bfab89324202d69ea7e45748930ca17
SHA1 e652bb097a5dbcbe9021c9b21fe73ff6364877c9
SHA512 cd47ddef404f83c9347051626dc318d1012787e3d698d2ab51354efa7706a809fbb7cd10ac47388265c7a4c542f326948cf5f66599329c04cf644416b3095806
SSDEEP 196608:nc1kH+86fzD+SFY1ZTULaGg/u7wJxeI3/upE8z522ZT7OM6RW:ncL8u+H1mLLmu7CeIWpzz5pZ2W
TLSH
T120A61228BEC5C567DD3B5DB29A47D847E12B608C8285350B12B056A9DCF8DC85B03FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1be8d741c1a74a88393686cbd19d446347d4bbe416f56142db44894dd5af3f10

File Explorer

1be8d741c1a74a88393686cbd19d446347d4bbe416f56142db44894dd5af3f10

.exe 9.3MB

1be8d741c1a74a88393686cbd19d446347d4bbe416f56142db44894dd5af3f10

IMPHASH 004b53f07cf2a89daeb388e7867779d7
SHA256 1be8d741c1a74a88393686cbd19d446347d4bbe416f56142db44894dd5af3f10
MD5 0bfab89324202d69ea7e45748930ca17
SHA1 e652bb097a5dbcbe9021c9b21fe73ff6364877c9
SHA512 cd47ddef404f83c9347051626dc318d1012787e3d698d2ab51354efa7706a809fbb7cd10ac47388265c7a4c542f326948cf5f66599329c04cf644416b3095806
SSDEEP 196608:nc1kH+86fzD+SFY1ZTULaGg/u7wJxeI3/upE8z522ZT7OM6RW:ncL8u+H1mLLmu7CeIWpzz5pZ2W
TLSH
T120A61228BEC5C567DD3B5DB29A47D847E12B608C8285350B12B056A9DCF8DC85B03FEE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

88657

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

SetLastError GetCurrentProcess GetNativeSystemInfo GetModuleFileNameW GetModuleHandleW GetProcAddress GetUserDefaultUILanguage FindClose FindFirstFileW GetLastError CreateProcessW GetFileAttributesW CreateFileW GetLocalTime AttachConsole HeapSize CloseHandle SetFilePointerEx GetFileSizeEx GetConsoleMode GetEnvironmentVariableW ReadFile ReadConsoleW SetEndOfFile FindNextFileW RtlUnwind WideCharToMultiByte MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetStringTypeW GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW TerminateProcess RaiseException WriteConsoleW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapReAlloc FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegCloseKey RegGetValueW

Name

.text

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

182KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1be8d741c1a74a88393686cbd19d446347d4bbe416f56142db44894dd5af3f10

version

kernel32

user32

shell32

advapi32

generic