b8c2b87a0a96bbef226f8e4790735eda36e2739036feecd7a09b753bbecafe08

Sharing

Copy URL Twitter E-mail

General

Target
b8c2b87a0a96bbef226f8e4790735eda36e2739036feecd7a09b753bbecafe08
Size 204KB
Sample260809-ta497stxft
SHA256 b8c2b87a0a96bbef226f8e4790735eda36e2739036feecd7a09b753bbecafe08
MD5 9ca5ff9e72c3048d8137c55413d91180
SHA1 1de51c37b46e3e2aed977957c1220e4fe7f33bea
SHA512 042f2100051b0501e67720dc743504cd258bbd568225a541a2bbdafc341fc530bb7a3b77ea3f69989152d6aa0d7befc4384c9b12f0ad7fce8fc651276ac2890c
SSDEEP 3072:gKDHumBPvKg9FtZH17fqWRmmnEtPzXfWw0wfwH2BlPAuaY:OmBh
TLSH
T14614102227F88610F2F3AB752DB947656E377D61EE38C60E6A01A15D1971FA0DE20733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c2b87a0a96bbef226f8e4790735eda36e2739036feecd7a09b753bbecafe08

File Explorer

b8c2b87a0a96bbef226f8e4790735eda36e2739036feecd7a09b753bbecafe08

.dll 204KB

b8c2b87a0a96bbef226f8e4790735eda36e2739036feecd7a09b753bbecafe08

IMPHASH ca802bd1f02b68d53f74e5ac3920a6fe
SHA256 b8c2b87a0a96bbef226f8e4790735eda36e2739036feecd7a09b753bbecafe08
MD5 9ca5ff9e72c3048d8137c55413d91180
SHA1 1de51c37b46e3e2aed977957c1220e4fe7f33bea
SHA512 042f2100051b0501e67720dc743504cd258bbd568225a541a2bbdafc341fc530bb7a3b77ea3f69989152d6aa0d7befc4384c9b12f0ad7fce8fc651276ac2890c
SSDEEP 3072:gKDHumBPvKg9FtZH17fqWRmmnEtPzXfWw0wfwH2BlPAuaY:OmBh
TLSH
T14614102227F88610F2F3AB752DB947656E377D61EE38C60E6A01A15D1971FA0DE20733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegEnumKeyW RegOpenKeyExW RegQueryValueW

comdlg32

GetOpenFileNameA

kernel32

DisableThreadLibraryCalls FindResourceA FindResourceW FormatMessageW FreeLibrary GetModuleHandleW GetProcAddress GetTickCount GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA LoadResource LockResource MultiByteToWideChar WideCharToMultiByte

ntdll

_vsnprintf

ole32

CLSIDFromString CoTaskMemFree GetClassFile OleCreate OleCreateFromFile OleGetClipboard OleRegGetUserType

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _wcsdup free fwrite getenv malloc memcmp memcpy memmove strcat strchr strcmp strcspn strlen wcslen wcsstr

user32

CheckDlgButton CheckRadioButton CreatePopupMenu DialogBoxIndirectParamA DialogBoxIndirectParamW EnableWindow EndDialog GetDlgItem GetForegroundWindow GetPropW InsertMenuW LoadStringA LoadStringW MessageBoxW PostMessageW RegisterClipboardFormatW RegisterWindowMessageW RemoveMenu RemovePropW SendMessageA SendMessageW SetDlgItemTextW SetFocus SetPropW SetWindowTextA SetWindowTextW ShowWindow wsprintfW

Name

.text

Size

24KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

144KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b8c2b87a0a96bbef226f8e4790735eda36e2739036feecd7a09b753bbecafe08

advapi32

comdlg32

kernel32

ntdll

ole32

ucrtbase

user32

generic