f8c824f6abd6a27b2a8345a8c62bb637d7aa4c3f84ca7f4a3e66fc6ebd213e1a

Sharing

Copy URL Twitter E-mail

General

Target
f8c824f6abd6a27b2a8345a8c62bb637d7aa4c3f84ca7f4a3e66fc6ebd213e1a
Size 114KB
Sample260810-sd947a1fkb
SHA256 f8c824f6abd6a27b2a8345a8c62bb637d7aa4c3f84ca7f4a3e66fc6ebd213e1a
MD5 f671cbfa9b5766df8ff48812f620eadb
SHA1 8948b96cd79f07cd1c5bd4cfce315a47d3d62ea1
SHA512 e80b09ce5ca45cd51f64f8f95effaebad599de1897ef8d3751d8df28b262deb72b687f02db1bae9eb9eb4a82f5aceceb563428b4a60bfaaf68595c42accccd4c
SSDEEP 3072:L6hnRe5RRH/lmtiPDJR98xPt3Hq5aNIUZ:L6obmOL8t
TLSH
T111B3085AF25330FCC66BC13496A76F72F47178641224AF7B5390DB392D20E50BA2DA35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8c824f6abd6a27b2a8345a8c62bb637d7aa4c3f84ca7f4a3e66fc6ebd213e1a

File Explorer

f8c824f6abd6a27b2a8345a8c62bb637d7aa4c3f84ca7f4a3e66fc6ebd213e1a

.exe 114KB

f8c824f6abd6a27b2a8345a8c62bb637d7aa4c3f84ca7f4a3e66fc6ebd213e1a

IMPHASH 501e9db9040f8c538f81f4ee46e9cfa1
SHA256 f8c824f6abd6a27b2a8345a8c62bb637d7aa4c3f84ca7f4a3e66fc6ebd213e1a
MD5 f671cbfa9b5766df8ff48812f620eadb
SHA1 8948b96cd79f07cd1c5bd4cfce315a47d3d62ea1
SHA512 e80b09ce5ca45cd51f64f8f95effaebad599de1897ef8d3751d8df28b262deb72b687f02db1bae9eb9eb4a82f5aceceb563428b4a60bfaaf68595c42accccd4c
SSDEEP 3072:L6hnRe5RRH/lmtiPDJR98xPt3Hq5aNIUZ:L6obmOL8t
TLSH
T111B3085AF25330FCC66BC13496A76F72F47178641224AF7B5390DB392D20E50BA2DA35
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject SelectObject

gdiplus

GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipGetImageEncoders GdipGetImageEncodersSize GdipSaveImageToStream GdiplusShutdown GdiplusStartup

kernel32

DeleteCriticalSection EnterCriticalSection ExpandEnvironmentStringsA GetLastError GetProcessHeap GetStartupInfoA HeapAlloc InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MultiByteToWideChar PeekNamedPipe SetHandleInformation SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _commode _errno _exit _fmode _initterm _ismbblead _lock _unlock abort atexit calloc exit fclose fflush fopen fprintf fputc free localeconv malloc memcpy memmove memset realloc signal strchr strcmp strerror strlen strncmp strncpy strrchr vfprintf wcscmp wcslen

ole32

CreateStreamOnHGlobal

user32

GetDC GetSystemMetrics ReleaseDC

Name

.text

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text0

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

368B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data0

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f8c824f6abd6a27b2a8345a8c62bb637d7aa4c3f84ca7f4a3e66fc6ebd213e1a

gdi32

gdiplus

kernel32

msvcrt

ole32

user32

generic