8b7a2e563418a557dea43949432b51123c657a1a9d72a71c2353fd2010b29532

Sharing

Copy URL Twitter E-mail

General

Target
8b7a2e563418a557dea43949432b51123c657a1a9d72a71c2353fd2010b29532
Size 90KB
Sample260811-pgssjaec43
SHA256 8b7a2e563418a557dea43949432b51123c657a1a9d72a71c2353fd2010b29532
MD5 80e8718878ba50731e88f1d05911def5
SHA1 3dfabff2fe6c5c9902ee33ed5f184ffb0200b440
SHA512 84373532cd283264e066678805a5c815eabbb13f41cdb7bc39d730eadc7ae8ab4f89bb21fe9199d2d6a0f4e91559275c49a7e0852d47713f2871f9066b95474c
SSDEEP 1536:kssiUdH/RjANskhhc+jg9vSIh9UENMfiOWyGj0/2RHadXtsvLpA5:kPY+yGA/OlA
TLSH
T1AE933A0117B5AF7BFA514B398CF38218DA3AE1530F62088F5C61052A6B737E58D63B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b7a2e563418a557dea43949432b51123c657a1a9d72a71c2353fd2010b29532

File Explorer

8b7a2e563418a557dea43949432b51123c657a1a9d72a71c2353fd2010b29532

.exe 90KB

8b7a2e563418a557dea43949432b51123c657a1a9d72a71c2353fd2010b29532

IMPHASH 97e6a3715875bfca0c67f65565c7d152
SHA256 8b7a2e563418a557dea43949432b51123c657a1a9d72a71c2353fd2010b29532
MD5 80e8718878ba50731e88f1d05911def5
SHA1 3dfabff2fe6c5c9902ee33ed5f184ffb0200b440
SHA512 84373532cd283264e066678805a5c815eabbb13f41cdb7bc39d730eadc7ae8ab4f89bb21fe9199d2d6a0f4e91559275c49a7e0852d47713f2871f9066b95474c
SSDEEP 1536:kssiUdH/RjANskhhc+jg9vSIh9UENMfiOWyGj0/2RHadXtsvLpA5:kPY+yGA/OlA
TLSH
T1AE933A0117B5AF7BFA514B398CF38218DA3AE1530F62088F5C61052A6B737E58D63B5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

CreateSolidBrush DeleteObject

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-private-l1-1-0

memcpy

api-ms-win-crt-string-l1-1-0

memset strlen strncmp wcslen

api-ms-win-crt-utility-l1-1-0

rand srand

user32

CreateWindowExA DefWindowProcA DispatchMessageA FillRect GetAsyncKeyState GetClientRect GetCursorPos GetDC GetMessageA GetSystemMetrics LoadCursorA MessageBoxA PostQuitMessage RegisterClassA ReleaseDC SetCursorPos SetTimer TranslateMessage wsprintfW

kernel32

CloseHandle CreateFileW CreateProcessW DeleteCriticalSection DeleteFileW EnterCriticalSection GetLastError GetStartupInfoA GetTempPathW InitializeCriticalSection IsDBCSLeadByte LeaveCriticalSection SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WriteFile

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-environment-l1-1-0

__p__environ

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/43

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/18

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8b7a2e563418a557dea43949432b51123c657a1a9d72a71c2353fd2010b29532

gdi32

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

user32

kernel32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic