828a74d81ab330872fccc946085bc2294df062c9e8c3433e1bef6bf7f0bba7d0

Sharing

Copy URL Twitter E-mail

General

Target
828a74d81ab330872fccc946085bc2294df062c9e8c3433e1bef6bf7f0bba7d0
Size 244KB
Sample260811-e6am5swbmg
SHA256 828a74d81ab330872fccc946085bc2294df062c9e8c3433e1bef6bf7f0bba7d0
MD5 693ce081e5097d22e4a9f198d89f5aad
SHA1 dd8e7d5507acdc10bd8a661dba57039dd7035a80
SHA512 e0f0cacc7de9e841c93b3ee07d5bff6ab605fb3add3bd2ab4ff672bde666ff91dcce36447f28f0e20d326d1d94a11e382f6d7aa6e4bb345aaffae423e1cd2621
SSDEEP 3072:ZyriuQ4vNCWwUir7atBBty2QqWAiHy6EIDx5ItC3A:2i8NCWwUiroBU2yk6ESISA
TLSH
T1FE346E13968D7CE6E03A0271ABBB47D9C71CDD611795D0CFA2C4198A86BD4E37A323C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
828a74d81ab330872fccc946085bc2294df062c9e8c3433e1bef6bf7f0bba7d0

File Explorer

828a74d81ab330872fccc946085bc2294df062c9e8c3433e1bef6bf7f0bba7d0

.exe 244KB

828a74d81ab330872fccc946085bc2294df062c9e8c3433e1bef6bf7f0bba7d0

IMPHASH 3e1fe2bfd3d87b761485ef0d91d23424
SHA256 828a74d81ab330872fccc946085bc2294df062c9e8c3433e1bef6bf7f0bba7d0
MD5 693ce081e5097d22e4a9f198d89f5aad
SHA1 dd8e7d5507acdc10bd8a661dba57039dd7035a80
SHA512 e0f0cacc7de9e841c93b3ee07d5bff6ab605fb3add3bd2ab4ff672bde666ff91dcce36447f28f0e20d326d1d94a11e382f6d7aa6e4bb345aaffae423e1cd2621
SSDEEP 3072:ZyriuQ4vNCWwUir7atBBty2QqWAiHy6EIDx5ItC3A:2i8NCWwUiroBU2yk6ESISA
TLSH
T1FE346E13968D7CE6E03A0271ABBB47D9C71CDD611795D0CFA2C4198A86BD4E37A323C6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

108334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\workspace\testVc\testAudioLoopback\testAudioLoopback\Release\testAudioLoopback.pdb

kernel32

InitializeCriticalSectionEx CreateToolhelp32Snapshot GetLastError Process32NextW Process32FirstW GetProcAddress DeleteCriticalSection GetModuleHandleW WideCharToMultiByte GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle ReleaseSemaphore OutputDebugStringA InitializeCriticalSection WaitForSingleObject GetCurrentThreadId Sleep CloseHandle GetCurrentProcessId CreateSemaphoreW GetSystemTimeAsFileTime CreateDirectoryA CreateEventExW WriteFile TerminateProcess WaitForMultipleObjects GetProcessId K32GetModuleFileNameExW SetFilePointer LeaveCriticalSection CreateFileW OpenProcess ProcessIdToSessionId FormatMessageW SetEvent LoadLibraryW K32EnumProcesses LocalFree CreateProcessW K32EnumProcessModules lstrcmpiW FlushFileBuffers InitializeSListHead QueryPerformanceCounter GetStartupInfoW GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive OutputDebugStringW IsDebuggerPresent EnterCriticalSection LocalAlloc GetModuleFileNameA

user32

GetWindowLongW GetMessageW DefWindowProcW DestroyWindow CreateWindowExW EndPaint BeginPaint UpdateWindow DialogBoxParamW PostQuitMessage GetDlgItem SendMessageA LoadCursorW LoadIconW TranslateMessage TranslateAcceleratorW MessageBoxA DispatchMessageW ShowWindow LoadStringW LoadAcceleratorsW RegisterClassExW EndDialog

shell32

ShellExecuteExW

ole32

CoCreateFreeThreadedMarshaler CoUninitialize CoInitializeEx

msvcp140

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?width@ios_base@std@@QAE_J_J@Z ?width@ios_base@std@@QBE_JXZ ?flags@ios_base@std@@QBEHXZ ?good@ios_base@std@@QBE_NXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?_Throw_Cpp_error@std@@YAXH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_function_call@std@@YAXXZ _Cnd_do_broadcast_at_thread_exit _Thrd_id _Thrd_join ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?uncaught_exception@std@@YA_NXZ ?_Xlength_error@std@@YAXPBD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xout_of_range@std@@YAXPBD@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

shlwapi

PathIsDirectoryA

vcruntime140

_CxxThrowException __current_exception_context __current_exception _except_handler4_common memmove __CxxFrameHandler3 __std_exception_destroy __std_exception_copy _purecall memchr memcpy memset memcmp

api-ms-win-crt-time-l1-1-0

_localtime64_s _mktime64 _time64

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _c_exit _register_thread_local_exe_atexit_callback _initialize_wide_environment _configure_wide_argv _initterm exit _invoke_watson _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _controlfp_s _initterm_e _initialize_onexit_table terminate _beginthreadex _exit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode fread __stdio_common_vsnprintf_s ftell __stdio_common_vsprintf fwrite __stdio_common_vfprintf fopen __acrt_iob_func fseek fflush __stdio_common_vswprintf_s fclose

api-ms-win-crt-filesystem-l1-1-0

_access remove

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

Sharing

General

Malware Config

Signatures

File Explorer

828a74d81ab330872fccc946085bc2294df062c9e8c3433e1bef6bf7f0bba7d0

kernel32

user32

shell32

ole32

msvcp140

shlwapi

vcruntime140

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic