b56a8c8ba1fb3ff01e524c3ebcdf3eb5ae5b0849d62272cc46d7c8bac238282c

Sharing

Copy URL Twitter E-mail

General

Target
b56a8c8ba1fb3ff01e524c3ebcdf3eb5ae5b0849d62272cc46d7c8bac238282c
Size 290KB
Sample260817-l95q1sysht
SHA256 b56a8c8ba1fb3ff01e524c3ebcdf3eb5ae5b0849d62272cc46d7c8bac238282c
MD5 004f117de1b51937b02b093478ea7f21
SHA1 b15b0b02e62df19d3ad62219d705410d897315d4
SHA512 3265164bf9b8cb91dd738af7e6784898da4cc4f70adb6ee242e166be3561cc70dc573fa45a543baf252b0ba46f243d2ad49d00aceca12b7da879a896943dd048
SSDEEP 3072:QsHmctZeOtxBLn0wqkUeIDlX1Qvd3xajvGtcBPWbqyQixMXvQ4HU1QKZ2k:QE7ZecxBLnOP1QVUjfcqyDxMX4z
TLSH
T199541A4AAF6CDECBC5D1EC7D1B79A21AC6EBDDA2887D0341D4E67E1EC1B5CE02914810
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b56a8c8ba1fb3ff01e524c3ebcdf3eb5ae5b0849d62272cc46d7c8bac238282c

File Explorer

b56a8c8ba1fb3ff01e524c3ebcdf3eb5ae5b0849d62272cc46d7c8bac238282c

.exe 290KB

b56a8c8ba1fb3ff01e524c3ebcdf3eb5ae5b0849d62272cc46d7c8bac238282c

IMPHASH eb4452800f74265f63e1ab7f8ac2122a
SHA256 b56a8c8ba1fb3ff01e524c3ebcdf3eb5ae5b0849d62272cc46d7c8bac238282c
MD5 004f117de1b51937b02b093478ea7f21
SHA1 b15b0b02e62df19d3ad62219d705410d897315d4
SHA512 3265164bf9b8cb91dd738af7e6784898da4cc4f70adb6ee242e166be3561cc70dc573fa45a543baf252b0ba46f243d2ad49d00aceca12b7da879a896943dd048
SSDEEP 3072:QsHmctZeOtxBLn0wqkUeIDlX1Qvd3xajvGtcBPWbqyQixMXvQ4HU1QKZ2k:QE7ZecxBLnOP1QVUjfcqyDxMX4z
TLSH
T199541A4AAF6CDECBC5D1EC7D1B79A21AC6EBDDA2887D0341D4E67E1EC1B5CE02914810
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

MessageBoxW MessageBoxA

python311

PyWideStringList_Append Py_DecodeLocale PyUnicode_Format PyUnicode_FromString PyEval_SaveThread PyConfig_InitIsolatedConfig PyConfig_SetArgv Py_Exit PyImport_ImportModule PyErr_NormalizeException Py_ExitStatusException PySys_GetObject _Py_NoneStruct PyConfig_SetString PyTuple_New Py_FinalizeEx PyExc_SystemExit Py_Finalize PyStatus_Exception PyUnicode_Join PyErr_ExceptionMatches PyErr_Fetch PyLong_AsLong PyUnicode_AsWideCharString PyObject_GetAttrString PyWideStringList_Insert _Py_Dealloc PyErr_Clear PyMem_Free PyPreConfig_InitIsolatedConfig PyEval_RestoreThread PyStatus_Error PyMem_RawFree Py_InitializeFromConfig PyConfig_Read Py_PreInitialize PyStatus_Ok PyObject_Str PyConfig_Clear PyStatus_IsError PyMem_RawMalloc PyObject_CallObject

kernel32

TerminateProcess GetModuleFileNameW LoadLibraryExW GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent RtlCaptureContext GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry AddDllDirectory

vcruntime140

__current_exception_context __current_exception __C_specific_handler memcpy memset wcsrchr

api-ms-win-crt-runtime-l1-1-0

__p___wargv terminate _crt_atexit _register_onexit_function _initialize_onexit_table __p___argc _register_thread_local_exe_atexit_callback _c_exit _cexit _set_app_type _exit exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

_wfopen fclose __p__commode _set_fmode fread

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

b56a8c8ba1fb3ff01e524c3ebcdf3eb5ae5b0849d62272cc46d7c8bac238282c

user32

python311

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic