80aadfafff8098a407838c20e8f2891a58bb16e10c27185a895b6f9f89532b69

Sharing

Copy URL Twitter E-mail

General

Target
80aadfafff8098a407838c20e8f2891a58bb16e10c27185a895b6f9f89532b69
Size 73KB
Sample260814-gp93saff25
SHA256 80aadfafff8098a407838c20e8f2891a58bb16e10c27185a895b6f9f89532b69
MD5 5a2e0ad4361e43b39fc4437ad6ae4b32
SHA1 b4c1e63366d4249e34aed9401800a73357a11de3
SHA512 61a30112aaec5fc279f50c3b2cc60f6a037c55624a1bb4ffbb848e996464a56b14405a487a8022a0cf9a8c41f1a2324824e1ead18a4d0628a53e3a714aafe245
SSDEEP 1536:qd7p0Erj/0y8rz0vTGB6s4vSqBRRpySWcF:YrTwrz0rAzWSq3a7c
TLSH
T1F0734A99F7C350F5F66325F0595BD3BF4631A6128524EEBAFF8D535EB833A02600A206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80aadfafff8098a407838c20e8f2891a58bb16e10c27185a895b6f9f89532b69

File Explorer

80aadfafff8098a407838c20e8f2891a58bb16e10c27185a895b6f9f89532b69

.exe 73KB

80aadfafff8098a407838c20e8f2891a58bb16e10c27185a895b6f9f89532b69

IMPHASH 62b85f5a73d525e42cc3fcd3c974ba5c
SHA256 80aadfafff8098a407838c20e8f2891a58bb16e10c27185a895b6f9f89532b69
MD5 5a2e0ad4361e43b39fc4437ad6ae4b32
SHA1 b4c1e63366d4249e34aed9401800a73357a11de3
SHA512 61a30112aaec5fc279f50c3b2cc60f6a037c55624a1bb4ffbb848e996464a56b14405a487a8022a0cf9a8c41f1a2324824e1ead18a4d0628a53e3a714aafe245
SSDEEP 1536:qd7p0Erj/0y8rz0vTGB6s4vSqBRRpySWcF:YrTwrz0rAzWSq3a7c
TLSH
T1F0734A99F7C350F5F66325F0595BD3BF4631A6128524EEBAFF8D535EB833A02600A206
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CloseHandle CreateConsoleScreenBuffer CreateFileW DeleteCriticalSection EnterCriticalSection FlushConsoleInputBuffer FreeLibrary GetConsoleScreenBufferInfo GetFileSize GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoW GetStdHandle InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA MultiByteToWideChar ReadConsoleInputW ReadFile SetConsoleActiveScreenBuffer SetConsoleCursorPosition SetConsoleScreenBufferSize SetConsoleTitleW SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte WriteConsoleOutputCharacterW WriteFile

msvcrt

__mb_cur_max __p__commode __p__fmode __p__wcmdln __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _errno _initterm _iob _lock _onexit _unlock abort atoi calloc exit fprintf fputc fputwc free fwprintf fwrite localeconv malloc memcpy memmove memset setlocale realloc signal strchr strerror strlen strncmp swprintf_s vfprintf wcscpy_s wcslen

user32

GetAsyncKeyState GetKeyState

Name

.text

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

80aadfafff8098a407838c20e8f2891a58bb16e10c27185a895b6f9f89532b69

kernel32

msvcrt

user32

generic