d8d9e1839d2bb7bb41076a443e9d63cd2f52ae93f313c2e6bc37731fd0527908

General

Target
d8d9e1839d2bb7bb41076a443e9d63cd2f52ae93f313c2e6bc37731fd0527908
Size 175KB
Sample260812-mr4lnseq7t
SHA256 d8d9e1839d2bb7bb41076a443e9d63cd2f52ae93f313c2e6bc37731fd0527908
MD5 15b0155c5721eb4fe74e2211be31b56a
SHA1 90cde00136359994899fe1a570570b9055a6218e
SHA512 0da53a7b58cc7dcf00043811ee4894869dee07c1bf4f91613275edd1f65acee89cab00e40fad7b4fb095b588242a38ae1fb8a4e30a990f97b0a8fac6e9efa037
SSDEEP 3072:5pOrEzgTbFyKHNV2eFQp7jqn0TVYqZwPTlNueVo8X19R:5pOvfPeeFQp6cHuPx
TLSH
T169047C59B7A440F4E5769239C9925616F272B8210730CFFF03A446B69F232E19E3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8d9e1839d2bb7bb41076a443e9d63cd2f52ae93f313c2e6bc37731fd0527908

File Explorer

d8d9e1839d2bb7bb41076a443e9d63cd2f52ae93f313c2e6bc37731fd0527908

.exe 175KB

d8d9e1839d2bb7bb41076a443e9d63cd2f52ae93f313c2e6bc37731fd0527908

IMPHASH 4691d2a4862f2f275f69e6be475e54ef
SHA256 d8d9e1839d2bb7bb41076a443e9d63cd2f52ae93f313c2e6bc37731fd0527908
MD5 15b0155c5721eb4fe74e2211be31b56a
SHA1 90cde00136359994899fe1a570570b9055a6218e
SHA512 0da53a7b58cc7dcf00043811ee4894869dee07c1bf4f91613275edd1f65acee89cab00e40fad7b4fb095b588242a38ae1fb8a4e30a990f97b0a8fac6e9efa037
SSDEEP 3072:5pOrEzgTbFyKHNV2eFQp7jqn0TVYqZwPTlNueVo8X19R:5pOvfPeeFQp6cHuPx
TLSH
T169047C59B7A440F4E5769239C9925616F272B8210730CFFF03A446B69F232E19E3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

43656

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReadFile SetFilePointerEx GetFileSizeEx ReadConsoleW LCMapStringW CompareStringW CreateFileW CloseHandle HeapSize WriteConsoleW SetEndOfFile TlsSetValue Sleep HeapAlloc GetProcessHeap InitializeCriticalSection EnterCriticalSection LeaveCriticalSection WideCharToMultiByte MultiByteToWideChar QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx GetLastError SetLastError DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW

Name

.text

Size

117KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

632B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d8d9e1839d2bb7bb41076a443e9d63cd2f52ae93f313c2e6bc37731fd0527908

kernel32

generic