61caff7f100125ea508d5e12a3bb679a42ea33249429292f3d8b5e69289b8d0a

Sharing

Copy URL Twitter E-mail

General

Target
61caff7f100125ea508d5e12a3bb679a42ea33249429292f3d8b5e69289b8d0a
Size 146KB
Sample260810-datkpshq6v
SHA256 61caff7f100125ea508d5e12a3bb679a42ea33249429292f3d8b5e69289b8d0a
MD5 c864d2c4f5cee6d6d8a6338b3628e236
SHA1 4db70e1fc448c271c94a69074acd46f24be8940c
SHA512 3ef0e1a073ed6b7c944088284c373d26d5bfe0d3c272b45accfda95f3132f81b9b41e7c761ee7b2436fa4413eaef73384542eb7dab353754c71de4a17dda9933
SSDEEP 1536:SNsMK69kWc+2T1yqvQNNuISVpymUBzHKFVsAMy4YcuNoNwPejLYQ3cDMr9zB:4E4D2hyqvQNNDhMFznpcuNoNlQwcG9z
TLSH
T11CE35B12BA4491FDE04AC074876585A367367CC90F2169FF12A866383FAAEF57F38714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61caff7f100125ea508d5e12a3bb679a42ea33249429292f3d8b5e69289b8d0a

File Explorer

61caff7f100125ea508d5e12a3bb679a42ea33249429292f3d8b5e69289b8d0a

.exe 146KB

61caff7f100125ea508d5e12a3bb679a42ea33249429292f3d8b5e69289b8d0a

IMPHASH 31a427707d5445e3e0bf997ff1dab69a
SHA256 61caff7f100125ea508d5e12a3bb679a42ea33249429292f3d8b5e69289b8d0a
MD5 c864d2c4f5cee6d6d8a6338b3628e236
SHA1 4db70e1fc448c271c94a69074acd46f24be8940c
SHA512 3ef0e1a073ed6b7c944088284c373d26d5bfe0d3c272b45accfda95f3132f81b9b41e7c761ee7b2436fa4413eaef73384542eb7dab353754c71de4a17dda9933
SSDEEP 1536:SNsMK69kWc+2T1yqvQNNuISVpymUBzHKFVsAMy4YcuNoNwPejLYQ3cDMr9zB:4E4D2hyqvQNNDhMFznpcuNoNlQwcG9z
TLSH
T11CE35B12BA4491FDE04AC074876585A367367CC90F2169FF12A866383FAAEF57F38714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

DispatchMessageW TranslateMessage GetMessageW DefWindowProcW PostQuitMessage GetSystemMetrics RegisterClassExW CreateWindowExW GetCursorPos

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetFileInformationByHandle GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetModuleFileNameW GetFileInformationByHandleEx GetFileInformationByHandle FindClose FindFirstFileExW IsProcessorFeaturePresent SetFileTime GetCommandLineW GetProcessHeap HeapFree CloseHandle WaitForSingleObject GetModuleHandleW CreateThread GetLastError GetTickCount GetCurrentProcessId GetCurrentThreadId GetLocalTime GetComputerNameA GetSystemDirectoryA QueryPerformanceCounter HeapReAlloc SetLastError GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW FormatMessageW GetCurrentThread SetThreadStackGuarantee GetModuleHandleA GetFullPathNameW CreateFileW

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

vcruntime140

__CxxFrameHandler3 memcpy memset memcmp __current_exception_context __C_specific_handler __current_exception

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initterm _set_app_type _exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate _get_narrow_winmain_command_line _initialize_narrow_environment _configure_narrow_argv exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

61caff7f100125ea508d5e12a3bb679a42ea33249429292f3d8b5e69289b8d0a

user32

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic