49f25a21b8b0c8c2c2b00c7b39e15f49362743bb21dfe90b3b6f6045fb86704e

Sharing

Copy URL Twitter E-mail

General

Target
49f25a21b8b0c8c2c2b00c7b39e15f49362743bb21dfe90b3b6f6045fb86704e
Size 127KB
Sample260810-dcc1qszdqe
SHA256 49f25a21b8b0c8c2c2b00c7b39e15f49362743bb21dfe90b3b6f6045fb86704e
MD5 dac08ed04e094b693217bc5814ab006d
SHA1 1181b2203c93a8c948a3534da09d617a1c43648a
SHA512 075f7f78f0f49d70d4230cb8942afc90d4cb983e54c26460ddbc4e53d4be6b336e0b8357c94d9ac95bc227e395d16890a11870d0917a11af072a869f88ed9711
SSDEEP 1536:dHz2KJ4gYLVs7HP2/O+/X5lwJmH/PPU6y2kqANreb++h8G04mYi4C/w20ozAU/gE:t25S7HP+O+fvA0UPqKSbhjMA+gL1J8
TLSH
T194D37C23B64450FDE40AC47C831185A3A7767CD91B226AFF12A960342F5DEE67F38726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f25a21b8b0c8c2c2b00c7b39e15f49362743bb21dfe90b3b6f6045fb86704e

File Explorer

49f25a21b8b0c8c2c2b00c7b39e15f49362743bb21dfe90b3b6f6045fb86704e

.exe 127KB

49f25a21b8b0c8c2c2b00c7b39e15f49362743bb21dfe90b3b6f6045fb86704e

IMPHASH 8d13331659a595b7a4cc49ca99371d70
SHA256 49f25a21b8b0c8c2c2b00c7b39e15f49362743bb21dfe90b3b6f6045fb86704e
MD5 dac08ed04e094b693217bc5814ab006d
SHA1 1181b2203c93a8c948a3534da09d617a1c43648a
SHA512 075f7f78f0f49d70d4230cb8942afc90d4cb983e54c26460ddbc4e53d4be6b336e0b8357c94d9ac95bc227e395d16890a11870d0917a11af072a869f88ed9711
SSDEEP 1536:dHz2KJ4gYLVs7HP2/O+/X5lwJmH/PPU6y2kqANreb++h8G04mYi4C/w20ozAU/gE:t25S7HP+O+fvA0UPqKSbhjMA+gL1J8
TLSH
T194D37C23B64450FDE40AC47C831185A3A7767CD91B226AFF12A960342F5DEE67F38726
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

92916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

GetCursorPos GetSystemMetrics

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

kernel32

GetModuleFileNameW GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCommandLineW GetProcessHeap HeapFree CloseHandle WaitForSingleObject GetTickCount GetCurrentProcessId GetCurrentThreadId GetLocalTime GetComputerNameA GetSystemDirectoryA QueryPerformanceCounter HeapReAlloc GetLastError SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleW FormatMessageW GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW FindClose GetFileInformationByHandle GetFileInformationByHandleEx IsProcessorFeaturePresent

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

__current_exception memcpy memset __CxxFrameHandler3 memcmp __C_specific_handler __current_exception_context

api-ms-win-crt-runtime-l1-1-0

_get_narrow_winmain_command_line _initterm _cexit _register_thread_local_exe_atexit_callback _configure_narrow_argv _initialize_narrow_environment _exit _set_app_type _initialize_onexit_table _register_onexit_function _crt_atexit terminate _seh_filter_exe _initterm_e exit _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

49f25a21b8b0c8c2c2b00c7b39e15f49362743bb21dfe90b3b6f6045fb86704e

user32

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic