65854e9e491b543d5142b33ca70c0eb8f19efed5fe4c51f940d5b1c880a9ba0a

Sharing

Copy URL Twitter E-mail

General

Target
65854e9e491b543d5142b33ca70c0eb8f19efed5fe4c51f940d5b1c880a9ba0a
Size 16KB
Sample260810-p84dcaygla
SHA256 65854e9e491b543d5142b33ca70c0eb8f19efed5fe4c51f940d5b1c880a9ba0a
MD5 f2dcdf5a00247dbb484fc876712f5cb7
SHA1 505706f5dc9a5ea27afdc34bebe3d7b2bc1eb0dc
SHA512 495ce56f0ee6f1884bd8c2b115f29e3ba2eeaf0f3f879aaf149c4f218c5c470d291766f0e23835c1691d47f5fec8012fd52726f9aac7cca622f396f2c2a54922
SSDEEP 192:EDTo0+oj7DcKL0YDBXem7kt3hZQ75ExzJpHGBHoYBE/Br6dq3Q5tfkG7T:ED7GYVXNkKExzJpHGtFE/BCq3W
TLSH
T152724B47FB424CE5EA25413A89F3696DE033F1358BB653EF8B6012250D9A7D06D3A389
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65854e9e491b543d5142b33ca70c0eb8f19efed5fe4c51f940d5b1c880a9ba0a

File Explorer

65854e9e491b543d5142b33ca70c0eb8f19efed5fe4c51f940d5b1c880a9ba0a

.exe 16KB

65854e9e491b543d5142b33ca70c0eb8f19efed5fe4c51f940d5b1c880a9ba0a

IMPHASH 1c5f52e5c773f59183ed2261b5fc4ac3
SHA256 65854e9e491b543d5142b33ca70c0eb8f19efed5fe4c51f940d5b1c880a9ba0a
MD5 f2dcdf5a00247dbb484fc876712f5cb7
SHA1 505706f5dc9a5ea27afdc34bebe3d7b2bc1eb0dc
SHA512 495ce56f0ee6f1884bd8c2b115f29e3ba2eeaf0f3f879aaf149c4f218c5c470d291766f0e23835c1691d47f5fec8012fd52726f9aac7cca622f396f2c2a54922
SSDEEP 192:EDTo0+oj7DcKL0YDBXem7kt3hZQ75ExzJpHGBHoYBE/Br6dq3Q5tfkG7T:ED7GYVXNkKExzJpHGtFE/BCq3W
TLSH
T152724B47FB424CE5EA25413A89F3696DE033F1358BB653EF8B6012250D9A7D06D3A389
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\yypig\source\repos\asdtest\x64\Release\asdtest.pdb

kernel32

CreateToolhelp32Snapshot MultiByteToWideChar GetTempPathA Process32NextW Process32FirstW CloseHandle CreateFileW GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetModuleHandleW VirtualAlloc VirtualFree WriteFile GetCurrentProcessId QueryPerformanceCounter

user32

EnumWindows PostMessageA IsWindowVisible SendMessageTimeoutA GetWindowThreadProcessId

advapi32

CryptAcquireContextW CryptReleaseContext CryptGenRandom

shell32

SHGetFolderPathA

vcruntime140

memmove memset __current_exception_context __current_exception __C_specific_handler memcpy

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vswprintf_s __p__commode fopen __stdio_common_vsprintf fwrite fclose

api-ms-win-crt-time-l1-1-0

clock _time64

api-ms-win-crt-utility-l1-1-0

rand srand

api-ms-win-crt-heap-l1-1-0

free malloc _set_new_mode

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-runtime-l1-1-0

_exit _seh_filter_exe __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initterm _set_app_type _initialize_onexit_table _get_initial_narrow_environment _crt_atexit terminate _register_onexit_function exit _configure_narrow_argv _initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

65854e9e491b543d5142b33ca70c0eb8f19efed5fe4c51f940d5b1c880a9ba0a

kernel32

user32

advapi32

shell32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic