265543b57bba526952f6281d182a1fa1f2a2db731c4c0733ce87d99c4e6b1d17

Sharing

Copy URL Twitter E-mail

General

Target
265543b57bba526952f6281d182a1fa1f2a2db731c4c0733ce87d99c4e6b1d17
Size 325KB
Sample260815-dkqa2aytav
SHA256 265543b57bba526952f6281d182a1fa1f2a2db731c4c0733ce87d99c4e6b1d17
MD5 bc770c9ab6390d1fb6229b3bd5d0e7cd
SHA1 666a1e434c1d8e0241f7bdc846c1e0a154fd5741
SHA512 9b0c7eeb7cea96cedb8a04d63882e8149378e8c1769ac4d7b4ceb9df29296e79181f76ce9f3a016f8f559e9e81179b8005d3fa3efce02ff377fc9317e82f881f
SSDEEP 6144:V6hazYMXlsoW3LLbiFQOAmQf1rlzosJWUscRwSJ:VFEMXls53H0qZlX
TLSH
T1F864189FB5486DEBCD5B803848170916B7732172A7A2FB67831487395C1B362EE37E18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
265543b57bba526952f6281d182a1fa1f2a2db731c4c0733ce87d99c4e6b1d17

File Explorer

265543b57bba526952f6281d182a1fa1f2a2db731c4c0733ce87d99c4e6b1d17

.exe 325KB

265543b57bba526952f6281d182a1fa1f2a2db731c4c0733ce87d99c4e6b1d17

IMPHASH ea14ef3a98314883336e644dbf2f09a7
SHA256 265543b57bba526952f6281d182a1fa1f2a2db731c4c0733ce87d99c4e6b1d17
MD5 bc770c9ab6390d1fb6229b3bd5d0e7cd
SHA1 666a1e434c1d8e0241f7bdc846c1e0a154fd5741
SHA512 9b0c7eeb7cea96cedb8a04d63882e8149378e8c1769ac4d7b4ceb9df29296e79181f76ce9f3a016f8f559e9e81179b8005d3fa3efce02ff377fc9317e82f881f
SSDEEP 6144:V6hazYMXlsoW3LLbiFQOAmQf1rlzosJWUscRwSJ:VFEMXls53H0qZlX
TLSH
T1F864189FB5486DEBCD5B803848170916B7732172A7A2FB67831487395C1B362EE37E18
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest

kernel32

CloseHandle CreateFileW CreateThread DeleteCriticalSection EnterCriticalSection ExitProcess FindClose FindFirstFileExA FindNextFileA FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameA GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTickCount64 HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

233KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

265543b57bba526952f6281d182a1fa1f2a2db731c4c0733ce87d99c4e6b1d17

winhttp

kernel32

generic