0093daf418edaa6c171623b0c39c96768297bf17ecc3c8265ce402b12219d4f7

Sharing

Copy URL Twitter E-mail

General

Target
0093daf418edaa6c171623b0c39c96768297bf17ecc3c8265ce402b12219d4f7
Size 2.3MB
Sample260809-vbhchasbkb
SHA256 0093daf418edaa6c171623b0c39c96768297bf17ecc3c8265ce402b12219d4f7
MD5 257142793436eb6c4697c36aa676601b
SHA1 0106681f9a430911e4242bc365cdfbe12093e2f6
SHA512 9816ad75d53039658b4de8a324f5a93cec17d65dbad0f0ace3724267c373327377cd686696ee4b97dca577decc7a9a5f6c663c7e947ec593822bd3d844964268
SSDEEP 49152:/3TB8LKpxAPRCAiyLvJgft/RxY0RkrDeDJzVzZmo6isxDnJwu55Ky5K1gEvk/PIb:/39ERgexQ8vI
TLSH
T168B56C006E1C0660C9842B3963D37A983EF36015737B6B8F5A666DBC7DD6760BC297E0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0093daf418edaa6c171623b0c39c96768297bf17ecc3c8265ce402b12219d4f7

File Explorer

0093daf418edaa6c171623b0c39c96768297bf17ecc3c8265ce402b12219d4f7

.exe 2.3MB

0093daf418edaa6c171623b0c39c96768297bf17ecc3c8265ce402b12219d4f7

IMPHASH 5b4c0bc54a6804be30b3bdbb6e8f37ec
SHA256 0093daf418edaa6c171623b0c39c96768297bf17ecc3c8265ce402b12219d4f7
MD5 257142793436eb6c4697c36aa676601b
SHA1 0106681f9a430911e4242bc365cdfbe12093e2f6
SHA512 9816ad75d53039658b4de8a324f5a93cec17d65dbad0f0ace3724267c373327377cd686696ee4b97dca577decc7a9a5f6c663c7e947ec593822bd3d844964268
SSDEEP 49152:/3TB8LKpxAPRCAiyLvJgft/RxY0RkrDeDJzVzZmo6isxDnJwu55Ky5K1gEvk/PIb:/39ERgexQ8vI
TLSH
T168B56C006E1C0660C9842B3963D37A983EF36015737B6B8F5A666DBC7DD6760BC297E0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStdHandle GetConsoleMode TlsGetValue GetLastError SetLastError RaiseException ExitProcess GetStartupInfoA GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer SetEndOfFile GetSystemInfo LoadLibraryW GetProcAddress FreeLibrary FormatMessageW CreateFileW GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority GetCurrentThread OpenThread IsDebuggerPresent CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP RtlUnwind FindResourceA FindResourceExA EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA GetWindowsDirectoryA CreateProcessA GetVersionExA CompareStringA GetLocaleInfoA EnumCalendarInfoA CompareStringW GetLocaleInfoW FreeResource LockResource VirtualFree VirtualQuery GetExitCodeProcess LoadResource SizeofResource GetCPInfo GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetSystemMetrics MessageBeep

Name

.text

Size

176KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.stab

Size

769KB

Virtual Size

769KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.stabstr

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0093daf418edaa6c171623b0c39c96768297bf17ecc3c8265ce402b12219d4f7

kernel32

oleaut32

user32

generic