58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5

Sharing

Copy URL Twitter E-mail

General

Target
58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5
Size 77KB
Sample260806-3gbe5scg95
SHA256 58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5
MD5 aff00d7779a245cded39a38ca08d4612
SHA1 545cf982c2612d623aa4be572cafeb87893c4846
SHA512 9714a0fc31faa562b668add2ff45f1ae0968c6a65f7e8486c8faa1610f61c7eff458e3feb85dd965363e0d01c9f6f82afac4c6f0bbbdca5e54c6503d8db03811
SSDEEP 1536:pyZfY/2aeP85cErK7eSjBfNPtqPwmF2pHkd3E/RN4ZmAaxW6cjK6r/nVEcmsxEIx:pyZ/RU5/rK7eSjBfNPtqPBF2pHkd3E/3
TLSH
T12B730725EFEB8D17F9A24A3959B7836A1671FC0F0B34894FC64C722E4970B11E5E4382
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5

File Explorer

58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5

.dll 77KB

58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5

IMPHASH 0ee51073a086835ec2ad489124ed6c89
SHA256 58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5
MD5 aff00d7779a245cded39a38ca08d4612
SHA1 545cf982c2612d623aa4be572cafeb87893c4846
SHA512 9714a0fc31faa562b668add2ff45f1ae0968c6a65f7e8486c8faa1610f61c7eff458e3feb85dd965363e0d01c9f6f82afac4c6f0bbbdca5e54c6503d8db03811
SSDEEP 1536:pyZfY/2aeP85cErK7eSjBfNPtqPwmF2pHkd3E/RN4ZmAaxW6cjK6r/nVEcmsxEIx:pyZ/RU5/rK7eSjBfNPtqPBF2pHkd3E/3
TLSH
T12B730725EFEB8D17F9A24A3959B7836A1671FC0F0B34894FC64C722E4970B11E5E4382
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ntdll

vDbgPrintExWithPrefix

kernel32

CloseHandle CommConfigDialogW CreateFileW DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentVariableA GetLastError GetModuleHandleA GetProcessHeap GetSystemTimeAsFileTime GetTickCount GlobalAlloc HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryW LocalAlloc LocalFree LocalReAlloc QueryPerformanceCounter SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery lstrcatW lstrcpyW lstrlenW

msvcrt

__dllonexit _amsg_exit _initterm _iob _lock _onexit _unlock _vsnprintf _wcsicmp _wcsnicmp abort bsearch calloc free fwrite memcmp memmove sprintf strchr strcmp strcpy strcspn strncmp swprintf vfprintf wcsncmp

winspool.drv

ClosePrinter OpenPrinterW XcvDataW

user32

DialogBoxParamW EndDialog GetDlgItemInt GetDlgItemTextW GetWindowLongW LoadStringW MessageBoxW SendDlgItemMessageW SetDlgItemInt SetWindowLongW

Name

.text

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

87B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

1004B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rossym

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5

ntdll

kernel32

msvcrt

winspool.drv

user32

generic