99fefe9299fd8ae8d383d2137a2789cbefb81a7aa4d087bfd8948707d8940299

General

Target
99fefe9299fd8ae8d383d2137a2789cbefb81a7aa4d087bfd8948707d8940299
Size 107KB
Sample260819-ls36vstses
SHA256 99fefe9299fd8ae8d383d2137a2789cbefb81a7aa4d087bfd8948707d8940299
MD5 512ce66df10f95ae86ba0a3cfc4b45bc
SHA1 02ce114bb3868292f0965222eedce47a41ab4475
SHA512 9efeddeeebeb62b7d485861cea309be42e79bf2205711f322de1779879044e21a4ed67edce25a133ad6b204b91e996b849228743610d7a6c46478290a9eaa70c
SSDEEP 1536:t9cuATO2sGr8XAGeFqfseqDGCujKSewQO8dBEaoKEXlgsWbdq9dlFTozH:jcudw0fpqipKJwLCBEEEVAaXTo7
TLSH
T110B36B4BB3A430F9E5778678C8910A06DB72B8360B619FAF07A447861F636D14D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99fefe9299fd8ae8d383d2137a2789cbefb81a7aa4d087bfd8948707d8940299

File Explorer

99fefe9299fd8ae8d383d2137a2789cbefb81a7aa4d087bfd8948707d8940299

.exe 107KB

99fefe9299fd8ae8d383d2137a2789cbefb81a7aa4d087bfd8948707d8940299

IMPHASH f906c7e3a57bd2b9de5a5f146ddd36f3
SHA256 99fefe9299fd8ae8d383d2137a2789cbefb81a7aa4d087bfd8948707d8940299
MD5 512ce66df10f95ae86ba0a3cfc4b45bc
SHA1 02ce114bb3868292f0965222eedce47a41ab4475
SHA512 9efeddeeebeb62b7d485861cea309be42e79bf2205711f322de1779879044e21a4ed67edce25a133ad6b204b91e996b849228743610d7a6c46478290a9eaa70c
SSDEEP 1536:t9cuATO2sGr8XAGeFqfseqDGCujKSewQO8dBEaoKEXlgsWbdq9dlFTozH:jcudw0fpqipKJwLCBEEEVAaXTo7
TLSH
T110B36B4BB3A430F9E5778678C8910A06DB72B8360B619FAF07A447861F636D14D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

99fefe9299fd8ae8d383d2137a2789cbefb81a7aa4d087bfd8948707d8940299

kernel32

generic