ebf27d3fb8397cfeea426a7c5a567cfd91a51b945707f2df963296f431b6616c

Sharing

Copy URL Twitter E-mail

General

Target
ebf27d3fb8397cfeea426a7c5a567cfd91a51b945707f2df963296f431b6616c
Size 129KB
Sample260812-n35hsatthy
SHA256 ebf27d3fb8397cfeea426a7c5a567cfd91a51b945707f2df963296f431b6616c
MD5 9105d68533b08b72c88f2b1fc4f73bbc
SHA1 7e67fc53b6bacef1deed359a557d83056778c52f
SHA512 23e748ccdb9afee76eb8a0cacbbdefed25bee2e6f3ac3d92b96b6a6d728666ac5b39759fb8ea727e556c606d8b1ae9cfa6d99312ec42bf5e23c63ea088a5f4cc
SSDEEP 1536:OZaJR72F730zFh7nf08Gy7Q0ymUv2YPzTbx9+fICotNUAaJ32A04rN90FV:OZaJF804AVyAY/bUIBjUT2F
TLSH
T10FD36D137655A1EDD819C03482658976B332B0D90F325BFF13A9063C2FAADE66F3C664
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebf27d3fb8397cfeea426a7c5a567cfd91a51b945707f2df963296f431b6616c

File Explorer

ebf27d3fb8397cfeea426a7c5a567cfd91a51b945707f2df963296f431b6616c

.exe 129KB

ebf27d3fb8397cfeea426a7c5a567cfd91a51b945707f2df963296f431b6616c

IMPHASH 7620b8eff8d8a58b473d898166a75cd2
SHA256 ebf27d3fb8397cfeea426a7c5a567cfd91a51b945707f2df963296f431b6616c
MD5 9105d68533b08b72c88f2b1fc4f73bbc
SHA1 7e67fc53b6bacef1deed359a557d83056778c52f
SHA512 23e748ccdb9afee76eb8a0cacbbdefed25bee2e6f3ac3d92b96b6a6d728666ac5b39759fb8ea727e556c606d8b1ae9cfa6d99312ec42bf5e23c63ea088a5f4cc
SSDEEP 1536:OZaJR72F730zFh7nf08Gy7Q0ymUv2YPzTbx9+fICotNUAaJ32A04rN90FV:OZaJF804AVyAY/bUIBjUT2F
TLSH
T10FD36D137655A1EDD819C03482658976B332B0D90F325BFF13A9063C2FAADE66F3C664
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-96a52fd262d0f4c6.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memmove memset __current_exception __C_specific_handler __CxxFrameHandler3 __current_exception_context memcpy _CxxThrowException memcmp

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

ebf27d3fb8397cfeea426a7c5a567cfd91a51b945707f2df963296f431b6616c

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic