8e1ae21d9d9ec60d0bed109b5e53e61fa408b156d077847f4c1954243c44fd89

General

Target
8e1ae21d9d9ec60d0bed109b5e53e61fa408b156d077847f4c1954243c44fd89
Size 904KB
Sample260809-ylfhfavdlb
SHA256 8e1ae21d9d9ec60d0bed109b5e53e61fa408b156d077847f4c1954243c44fd89
MD5 8949447844684034e96a2cc8d0235d91
SHA1 f9a2fc1c847879144aadbd53fe0c9348a05d7930
SHA512 8dd9dced402051a4f63e655764634cbc0a7c01dc9e2d9a6260c95a5dfdaf630c75eed2b4884714e617f84748869b1a37251ba07b00dafcc55102f60ba5488f3c
SSDEEP 12288:PO5UlEozg51xQ7q+vEjuKtxfY6h+jc7rtRltVifcKiLRbNpmQaWGINck+:PE+zg51xQ7xa+0WkKwbNuqd+
TLSH
T1B7155C11B64AD036D96101B2592CEFBA805DBE355B7648CBB3C40F3E99605E32E31F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e1ae21d9d9ec60d0bed109b5e53e61fa408b156d077847f4c1954243c44fd89

File Explorer

8e1ae21d9d9ec60d0bed109b5e53e61fa408b156d077847f4c1954243c44fd89

.exe 904KB

8e1ae21d9d9ec60d0bed109b5e53e61fa408b156d077847f4c1954243c44fd89

IMPHASH 1c9ba049b36f30430330c9abc9f3dbed
SHA256 8e1ae21d9d9ec60d0bed109b5e53e61fa408b156d077847f4c1954243c44fd89
MD5 8949447844684034e96a2cc8d0235d91
SHA1 f9a2fc1c847879144aadbd53fe0c9348a05d7930
SHA512 8dd9dced402051a4f63e655764634cbc0a7c01dc9e2d9a6260c95a5dfdaf630c75eed2b4884714e617f84748869b1a37251ba07b00dafcc55102f60ba5488f3c
SSDEEP 12288:PO5UlEozg51xQ7q+vEjuKtxfY6h+jc7rtRltVifcKiLRbNpmQaWGINck+:PE+zg51xQ7xa+0WkKwbNuqd+
TLSH
T1B7155C11B64AD036D96101B2592CEFBA805DBE355B7648CBB3C40F3E99605E32E31F6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

583454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Git\WaDev\worktree\tlzxfileclient-range-fastlane-actor-prefetch-20260808\_work\build\TlzxFileClient\Release\TlzxFileClient.pdb

wininet

InternetOpenW InternetReadFile InternetSetOptionW InternetConnectW InternetCloseHandle HttpSendRequestW InternetCrackUrlW HttpQueryInfoW HttpOpenRequestW

winhttp

WinHttpOpen WinHttpCloseHandle WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl

advapi32

CryptGenRandom CryptReleaseContext CryptAcquireContextW

kernel32

SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP SetStdHandle FindNextFileA FindFirstFileExA GetProcessHeap WriteConsoleW IsValidCodePage CopyFileW SetErrorMode SetUnhandledExceptionFilter GetEnvironmentVariableW WideCharToMultiByte InterlockedExchange WriteFile InterlockedCompareExchange CreateFileW GetCurrentThreadId CloseHandle GetCurrentProcessId GetTickCount FlushFileBuffers GetFullPathNameW CreateMutexW WaitForSingleObject ReleaseMutex GetLastError LCMapStringW GetFileSizeEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteFileW MoveFileExW DeleteCriticalSection WaitForMultipleObjects SetEvent InterlockedIncrement SetEndOfFile UnlockFileEx GetFileInformationByHandle SetFilePointerEx LockFileEx CreateDirectoryW CreateEventW TlsAlloc CreateThread ResetEvent TlsFree TlsSetValue TlsGetValue QueryPerformanceCounter MultiByteToWideChar ReleaseSemaphore Sleep CreateSemaphoreW SetLastError ReadFile CancelIo SetNamedPipeHandleState CreateNamedPipeW DisconnectNamedPipe GetOverlappedResult ConnectNamedPipe FindFirstFileW FindNextFileW FindClose HeapSize GetVersionExW GetProcAddress GetModuleHandleW SetHandleInformation GetStdHandle TerminateProcess GetModuleFileNameW CreatePipe GlobalFree CreateProcessW GetSystemDirectoryW FreeLibrary LoadLibraryExW SystemTimeToFileTime DeviceIoControl RemoveDirectoryW GetFileAttributesW TryEnterCriticalSection EncodePointer DecodePointer RaiseException GetStringTypeW InitializeCriticalSectionAndSpinCount SwitchToThread GetSystemTimeAsFileTime CompareStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwind GetModuleFileNameA ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP GetFileType GetConsoleCP GetConsoleMode HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW HeapReAlloc

Sharing

General

Malware Config

Signatures

File Explorer

8e1ae21d9d9ec60d0bed109b5e53e61fa408b156d077847f4c1954243c44fd89

wininet

winhttp

advapi32

kernel32

generic