a65e54009cabf6845d146d195d655309985ede1fd42300eb9c696e88c84c309f

Sharing

Copy URL Twitter E-mail

General

Target
a65e54009cabf6845d146d195d655309985ede1fd42300eb9c696e88c84c309f
Size 238KB
Sample260811-e79hvsgj2y
SHA256 a65e54009cabf6845d146d195d655309985ede1fd42300eb9c696e88c84c309f
MD5 b0dcb2d939e634871e4e730942fe7f14
SHA1 18b30b5108b7a6e8c59f9e7d144639e2dea2d1fe
SHA512 f503f1609f078a6c0f165ff13293d950c874c89fcc5292f58e6b845e1d2b29af0f9857a1816edd53b9158bcafbc4685465ea6ed2f55c42c0d074dd2b3bcf128d
SSDEEP 3072:6pFkAqyjMCasU+8RwfwzMnxaVgCnyIAZMkPhJsCLj:AkyMCasU+8TzMxkkIAHhJ
TLSH
T184345D13968C7CE6E53A06B5ABBB47D9C71CDD610781D0CFA2C4198A867D8E37A313C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a65e54009cabf6845d146d195d655309985ede1fd42300eb9c696e88c84c309f

File Explorer

a65e54009cabf6845d146d195d655309985ede1fd42300eb9c696e88c84c309f

.exe 238KB

a65e54009cabf6845d146d195d655309985ede1fd42300eb9c696e88c84c309f

IMPHASH c58e63fe31a380e03030e18c663a8d18
SHA256 a65e54009cabf6845d146d195d655309985ede1fd42300eb9c696e88c84c309f
MD5 b0dcb2d939e634871e4e730942fe7f14
SHA1 18b30b5108b7a6e8c59f9e7d144639e2dea2d1fe
SHA512 f503f1609f078a6c0f165ff13293d950c874c89fcc5292f58e6b845e1d2b29af0f9857a1816edd53b9158bcafbc4685465ea6ed2f55c42c0d074dd2b3bcf128d
SSDEEP 3072:6pFkAqyjMCasU+8RwfwzMnxaVgCnyIAZMkPhJsCLj:AkyMCasU+8TzMxkkIAHhJ
TLSH
T184345D13968C7CE6E53A06B5ABBB47D9C71CDD610781D0CFA2C4198A867D8E37A313C6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\workspace\testVc\testAudioLoopback\testAudioLoopback\Release\testAudioLoopback.pdb

kernel32

InitializeCriticalSectionEx CreateToolhelp32Snapshot GetLastError Process32NextW Process32FirstW DeleteCriticalSection GetModuleHandleW WideCharToMultiByte GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle ReleaseSemaphore OutputDebugStringA InitializeCriticalSection WaitForSingleObject GetCurrentThreadId Sleep CloseHandle GetCurrentProcessId CreateSemaphoreW GetSystemTimeAsFileTime CreateDirectoryA CreateEventExW WriteFile TerminateProcess WaitForMultipleObjects GetProcessId K32GetModuleFileNameExW LeaveCriticalSection LocalAlloc CreateFileW OpenProcess ProcessIdToSessionId FormatMessageW SetEvent K32EnumProcesses LocalFree CreateProcessW K32EnumProcessModules lstrcmpiW FlushFileBuffers InitializeSListHead QueryPerformanceCounter GetStartupInfoW GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive OutputDebugStringW IsDebuggerPresent EnterCriticalSection SetFilePointer GetModuleFileNameA

user32

TranslateMessage GetWindowLongW GetMessageW DefWindowProcW DestroyWindow EndPaint BeginPaint UpdateWindow DialogBoxParamW PostQuitMessage GetDlgItem SendMessageA LoadCursorW LoadIconW EndDialog TranslateAcceleratorW MessageBoxA DispatchMessageW ShowWindow LoadStringW LoadAcceleratorsW RegisterClassExW CreateWindowExW

shell32

ShellExecuteExW

ole32

CoUninitialize CoInitializeEx CoCreateFreeThreadedMarshaler

msvcp140

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?width@ios_base@std@@QAE_J_J@Z ?width@ios_base@std@@QBE_JXZ ?flags@ios_base@std@@QBEHXZ ?good@ios_base@std@@QBE_NXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?_Throw_Cpp_error@std@@YAXH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_function_call@std@@YAXXZ _Cnd_do_broadcast_at_thread_exit _Thrd_id _Thrd_join ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?uncaught_exception@std@@YA_NXZ ?_Xlength_error@std@@YAXPBD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xout_of_range@std@@YAXPBD@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

shlwapi

PathIsDirectoryA

mmdevapi

ord17

vcruntime140

_except_handler4_common _CxxThrowException __current_exception_context __current_exception __CxxFrameHandler3 __std_exception_destroy __std_exception_copy _purecall memchr memcpy memset memmove memcmp

api-ms-win-crt-time-l1-1-0

_localtime64_s _mktime64 _time64

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _c_exit _register_thread_local_exe_atexit_callback _initialize_wide_environment _configure_wide_argv _initterm exit _invoke_watson _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _controlfp_s _initterm_e _initialize_onexit_table terminate _beginthreadex _exit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vsnprintf_s ftell fread __stdio_common_vsprintf fwrite __stdio_common_vfprintf fopen __acrt_iob_func fseek fflush __stdio_common_vswprintf_s fclose

api-ms-win-crt-filesystem-l1-1-0

_access remove

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

Sharing

General

Malware Config

Signatures

File Explorer

a65e54009cabf6845d146d195d655309985ede1fd42300eb9c696e88c84c309f

kernel32

user32

shell32

ole32

msvcp140

shlwapi

mmdevapi

vcruntime140

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic