ab23eee5a555a70fc4cf9083a2e54168af87d4eeaec32d5d26937c4ee99b498b

Sharing

Copy URL Twitter E-mail

General

Target
ab23eee5a555a70fc4cf9083a2e54168af87d4eeaec32d5d26937c4ee99b498b
Size 164KB
Sample260813-vr7bkavdpc
SHA256 ab23eee5a555a70fc4cf9083a2e54168af87d4eeaec32d5d26937c4ee99b498b
MD5 8d429330123ee2bf477832d6165ca926
SHA1 0e408f3ad8b1d14059ceedf84a0dd35b811981cc
SHA512 5413a184652824604eaeba532e123be9ad0d24c5dec8fcded5edb211553d9ae14e1d1b98fcfd748d82eb5967c1975d545eddc98034c91c3148025baa73aaa439
SSDEEP 1536:1OPz08+5E+LX2/mDHhDy49bs6KFvxeywSa94FYxkqn9m1TPtMiWtrNIbDYBQh2x8:1ja+LuMM4dAv47PURbVKGo2
TLSH
T118F329D6BAC5ADDBDA05423D85E78325227CF6C547839B03493872311E13AE06ECB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab23eee5a555a70fc4cf9083a2e54168af87d4eeaec32d5d26937c4ee99b498b

File Explorer

ab23eee5a555a70fc4cf9083a2e54168af87d4eeaec32d5d26937c4ee99b498b

.exe 164KB

ab23eee5a555a70fc4cf9083a2e54168af87d4eeaec32d5d26937c4ee99b498b

IMPHASH 4e3beea14bb35d9a4c967f6c9160cd49
SHA256 ab23eee5a555a70fc4cf9083a2e54168af87d4eeaec32d5d26937c4ee99b498b
MD5 8d429330123ee2bf477832d6165ca926
SHA1 0e408f3ad8b1d14059ceedf84a0dd35b811981cc
SHA512 5413a184652824604eaeba532e123be9ad0d24c5dec8fcded5edb211553d9ae14e1d1b98fcfd748d82eb5967c1975d545eddc98034c91c3148025baa73aaa439
SSDEEP 1536:1OPz08+5E+LX2/mDHhDy49bs6KFvxeywSa94FYxkqn9m1TPtMiWtrNIbDYBQh2x8:1ja+LuMM4dAv47PURbVKGo2
TLSH
T118F329D6BAC5ADDBDA05423D85E78325227CF6C547839B03493872311E13AE06ECB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateEllipticRgn CreateFontW CreatePen CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteObject FillRgn LineTo MoveToEx SelectObject SetBkMode SetTextColor

kernel32

DeleteCriticalSection EnterCriticalSection GetLastError GetModuleHandleA GetStartupInfoA InitializeCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery

msvcrt

__C_specific_handler __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _commode _fmode _initterm _ismbblead _onexit _time64 abort calloc exit fprintf free fwrite malloc memcpy rand signal srand strlen strncmp vfprintf wcscpy_s

shell32

Shell_NotifyIconW

user32

AppendMenuW BeginPaint CreatePopupMenu CreateWindowExW DefWindowProcW DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DrawTextW EndPaint FillRect GetClientRect GetCursorPos GetMessageA InvalidateRect KillTimer LoadCursorA LoadIconA LoadImageA PostMessageA PostQuitMessage PtInRect RegisterClassW ScreenToClient SendInput SendMessageA SetForegroundWindow SetTimer ShowWindow TrackPopupMenu TranslateMessage

Name

.text

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

744B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

707B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

512B

Virtual Size

450B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ab23eee5a555a70fc4cf9083a2e54168af87d4eeaec32d5d26937c4ee99b498b

gdi32

kernel32

msvcrt

shell32

user32

generic