903ad455fe1a01d34e8b5044529bd00bdc2a00d21943bc5455f37f4fb2fb23c7

Sharing

Copy URL Twitter E-mail

General

Target
903ad455fe1a01d34e8b5044529bd00bdc2a00d21943bc5455f37f4fb2fb23c7
Size 148KB
Sample260810-datkpshq6w
SHA256 903ad455fe1a01d34e8b5044529bd00bdc2a00d21943bc5455f37f4fb2fb23c7
MD5 61649a02e9be7b68ad69281de9012a2d
SHA1 4f1f30d444545ad7570479f6907fbd675bf2c445
SHA512 e7427f38a0712e3e6362f0bcd5fe39a6a7c834d27a755c5848cb42f0dcf560fdfc84e6c53ec4f12fa53b8949aeba8f2dc0823e3dc79bf6fcbce6821c98bdabf8
SSDEEP 1536:AqyTklxgYD60pnQ/sg9yDcnt/SiQOZz/qr7zmCMADqzoqIwXHZw9MkCgtSXEI9if:mG2Yj2yYnt/SiQqzE/4tXZw9Mzgi5L8
TLSH
T1E4E35C13B65550F9E00AC074975185A7AB767C990F2269FF02A837383F6AAF27F38714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
903ad455fe1a01d34e8b5044529bd00bdc2a00d21943bc5455f37f4fb2fb23c7

File Explorer

903ad455fe1a01d34e8b5044529bd00bdc2a00d21943bc5455f37f4fb2fb23c7

.exe 148KB

903ad455fe1a01d34e8b5044529bd00bdc2a00d21943bc5455f37f4fb2fb23c7

IMPHASH fb155314ef59bfe825d4dc9b643a0af3
SHA256 903ad455fe1a01d34e8b5044529bd00bdc2a00d21943bc5455f37f4fb2fb23c7
MD5 61649a02e9be7b68ad69281de9012a2d
SHA1 4f1f30d444545ad7570479f6907fbd675bf2c445
SHA512 e7427f38a0712e3e6362f0bcd5fe39a6a7c834d27a755c5848cb42f0dcf560fdfc84e6c53ec4f12fa53b8949aeba8f2dc0823e3dc79bf6fcbce6821c98bdabf8
SSDEEP 1536:AqyTklxgYD60pnQ/sg9yDcnt/SiQOZz/qr7zmCMADqzoqIwXHZw9MkCgtSXEI9if:mG2Yj2yYnt/SiQqzE/4tXZw9Mzgi5L8
TLSH
T1E4E35C13B65550F9E00AC074975185A7AB767C990F2269FF02A837383F6AAF27F38714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

105448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

SetTimer SetMenu AppendMenuW CreateMenu DestroyWindow MessageBoxW InvalidateRect DefWindowProcW PostQuitMessage KillTimer EndPaint BeginPaint GetCursorPos GetSystemMetrics DispatchMessageW TranslateMessage RegisterClassExW CreateWindowExW GetMessageW

gdi32

TextOutW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetModuleFileNameW GetFileInformationByHandleEx GetFileInformationByHandle GetStartupInfoW FindFirstFileExW SetFileInformationByHandle SetFileTime CreateFileW GetFullPathNameW GetModuleHandleA SetThreadStackGuarantee IsProcessorFeaturePresent FormatMessageW FindClose GetCurrentThread GetEnvironmentVariableW HeapAlloc WriteConsoleW MultiByteToWideChar GetCommandLineW GetProcessHeap HeapFree CloseHandle WaitForSingleObject GetTickCount GetCurrentProcessId GetModuleHandleW CreateThread GetLastError GetCurrentThreadId GetLocalTime GetComputerNameA GetSystemDirectoryA QueryPerformanceCounter HeapReAlloc SetLastError GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

vcruntime140

__CxxFrameHandler3 memcpy memset memcmp __current_exception_context __C_specific_handler __current_exception

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initterm _set_app_type _exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate _get_narrow_winmain_command_line _initialize_narrow_environment exit _configure_narrow_argv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

903ad455fe1a01d34e8b5044529bd00bdc2a00d21943bc5455f37f4fb2fb23c7

user32

gdi32

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic