1e8f88a1f82d2c0f888c29f43f0dd508a362ff5c6c1b3454f9837a50eb9b7bd4

Sharing

Copy URL Twitter E-mail

General

Target
1e8f88a1f82d2c0f888c29f43f0dd508a362ff5c6c1b3454f9837a50eb9b7bd4
Size 11.8MB
Sample260811-e8f8pswbrc
SHA256 1e8f88a1f82d2c0f888c29f43f0dd508a362ff5c6c1b3454f9837a50eb9b7bd4
MD5 13de6a09098a92b1749179cc9057b2c4
SHA1 9eb5647d3095386428c85e5e51e6370f78926c26
SHA512 e11131871af6059c107108eb9f86f721df2fbb797d3e369a0c63fdfb1240f23a5bde45672744d70890a370197ae51943e7dcbe57982b8a5922d6e9e5529c89e2
SSDEEP 196608:ofBEpMx+bmu0TUKJFVXNFI18+xIsFwYiAJ2Ib1xBGQ9u109yNse:cBEk+v01JFi+CwY3MIb1xBfE09
TLSH
T163C6F2C936E9C1CCC654C6771DE2A27B5740A7684F6A16C32ADACD22F5CF9C028F9670
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e8f88a1f82d2c0f888c29f43f0dd508a362ff5c6c1b3454f9837a50eb9b7bd4

File Explorer

1e8f88a1f82d2c0f888c29f43f0dd508a362ff5c6c1b3454f9837a50eb9b7bd4

.exe 11.8MB

1e8f88a1f82d2c0f888c29f43f0dd508a362ff5c6c1b3454f9837a50eb9b7bd4

IMPHASH 949ebd8aa3ba141630560c06894983e8
SHA256 1e8f88a1f82d2c0f888c29f43f0dd508a362ff5c6c1b3454f9837a50eb9b7bd4
MD5 13de6a09098a92b1749179cc9057b2c4
SHA1 9eb5647d3095386428c85e5e51e6370f78926c26
SHA512 e11131871af6059c107108eb9f86f721df2fbb797d3e369a0c63fdfb1240f23a5bde45672744d70890a370197ae51943e7dcbe57982b8a5922d6e9e5529c89e2
SSDEEP 196608:ofBEpMx+bmu0TUKJFVXNFI18+xIsFwYiAJ2Ib1xBGQ9u109yNse:cBEk+v01JFi+CwY3MIb1xBfE09
TLSH
T163C6F2C936E9C1CCC654C6771DE2A27B5740A7684F6A16C32ADACD22F5CF9C028F9670
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13512928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dwmapi

DwmSetWindowAttribute

wininet

InternetSetOptionW

advapi32

RegGetValueW

flutter_desktop_context_menu_plugin

FlutterDesktopContextMenuPluginRegisterWithRegistrar

flutter_js_plugin

FlutterJsPluginRegisterWithRegistrar

permission_handler_windows_plugin

PermissionHandlerWindowsPluginRegisterWithRegistrar

proxy_manager_plugin

ProxyManagerPluginRegisterWithRegistrar

screen_retriever_windows_plugin

ScreenRetrieverWindowsPluginCApiRegisterWithRegistrar

share_plus_plugin

SharePlusWindowsPluginCApiRegisterWithRegistrar

tray_manager_plugin

TrayManagerPluginRegisterWithRegistrar

url_launcher_windows_plugin

UrlLauncherWindowsRegisterWithRegistrar

win32audio_plugin

Win32audioPluginCApiRegisterWithRegistrar

window_manager_plugin

WindowManagerPluginRegisterWithRegistrar

zstandard_windows_plugin

ZstandardWindowsPluginCApiRegisterWithRegistrar

flutter_windows

FlutterDesktopEngineGetMessenger

kernel32

QueryPerformanceCounter

user32

TranslateMessage

shell32

CommandLineToArgvW

ole32

CoInitializeEx

msvcp140

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

dbghelp

SymSetOptions

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function

api-ms-win-crt-environment-l1-1-0

_dupenv_s

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.8d

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.6gr47

Size

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.o5z0

Size

11.7MB

Virtual Size

11.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1e8f88a1f82d2c0f888c29f43f0dd508a362ff5c6c1b3454f9837a50eb9b7bd4

dwmapi

wininet

advapi32

flutter_desktop_context_menu_plugin

flutter_js_plugin

permission_handler_windows_plugin

proxy_manager_plugin

screen_retriever_windows_plugin

share_plus_plugin

tray_manager_plugin

url_launcher_windows_plugin

win32audio_plugin

window_manager_plugin

zstandard_windows_plugin

flutter_windows

kernel32

user32

shell32

ole32

msvcp140

dbghelp

vcruntime140_1

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic