34f883de8d3bd1730ba1ecab7c1429ac64b5c954fd218e266d0bb37e6d637788

Sharing

Copy URL Twitter E-mail

General

Target
34f883de8d3bd1730ba1ecab7c1429ac64b5c954fd218e266d0bb37e6d637788
Size 450KB
Sample260820-a54sdaaf73
SHA256 34f883de8d3bd1730ba1ecab7c1429ac64b5c954fd218e266d0bb37e6d637788
MD5 1db2ed01871f9a5445b91cdb5e90c65b
SHA1 57d870e912cef52536c46f36403c3973b3a27fb7
SHA512 79a343ded10789704a2c29102bb9993053548e4e9e51ba049070e29022aec5c0056cb6deebca12662a287e1d304cd7d65836d6a9dfa408d52d382ef8ad1f6f9c
SSDEEP 6144:vSaKdNRQq32P/PTVN4K3qYp0HWhK0+Sbm61OsICE:vSaKdN2q3OTVNx3lqHWhK0+SbmUICE
TLSH
T1E5A47EC066D88C35E3F6D73074E2561349796DE22D3B8A5FF2B036690F786B0D62163A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34f883de8d3bd1730ba1ecab7c1429ac64b5c954fd218e266d0bb37e6d637788

File Explorer

34f883de8d3bd1730ba1ecab7c1429ac64b5c954fd218e266d0bb37e6d637788

.exe 450KB

34f883de8d3bd1730ba1ecab7c1429ac64b5c954fd218e266d0bb37e6d637788

IMPHASH c1be558175a5def0c533ce6793a430b4
SHA256 34f883de8d3bd1730ba1ecab7c1429ac64b5c954fd218e266d0bb37e6d637788
MD5 1db2ed01871f9a5445b91cdb5e90c65b
SHA1 57d870e912cef52536c46f36403c3973b3a27fb7
SHA512 79a343ded10789704a2c29102bb9993053548e4e9e51ba049070e29022aec5c0056cb6deebca12662a287e1d304cd7d65836d6a9dfa408d52d382ef8ad1f6f9c
SSDEEP 6144:vSaKdNRQq32P/PTVN4K3qYp0HWhK0+Sbm61OsICE:vSaKdN2q3OTVNx3lqHWhK0+SbmUICE
TLSH
T1E5A47EC066D88C35E3F6D73074E2561349796DE22D3B8A5FF2B036690F786B0D62163A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\home\jenkins\agent\workspace\s_TANG_Software_TVSU_TVSU_master\tvsu\Output\tvsu.pdb

kernel32

GlobalFree LoadLibraryW LoadResource FindResourceW GlobalLock OpenMutexW GlobalUnlock MulDiv SetUnhandledExceptionFilter DecodePointer GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx Process32FirstW GetProcessHeap LCMapStringW CompareStringW GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GlobalAlloc Process32NextW GetLastError Sleep CreateToolhelp32Snapshot FreeResource GetVersionExW WaitForSingleObject CreateMutexW GetCurrentProcess SizeofResource GetCurrentProcessId CreateFileW WriteFile FreeLibrary GetProcAddress CloseHandle GetVersionExA LoadLibraryA OpenProcess TerminateProcess WriteConsoleW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType HeapAlloc HeapFree GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError UnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException

user32

GetDesktopWindow PostQuitMessage KillTimer GetClientRect ReleaseDC FindWindowW TranslateMessage SetTimer DispatchMessageW UpdateWindow BeginPaint ShowWindow EndPaint SetWindowLongW LoadStringW GetMessageW CreateDialogParamW DestroyWindow GetDC SetWindowPos MessageBoxW SendMessageW

gdi32

GetDeviceCaps

advapi32

RegCloseKey EqualSid AllocateAndInitializeSid OpenProcessToken FreeSid RegOpenKeyExW RegGetValueW GetUserNameW LookupAccountSidW RegQueryValueExW GetTokenInformation

shell32

ShellExecuteExW

ole32

CreateStreamOnHGlobal

shlwapi

StrCmpW

gdiplus

GdiplusStartup GdiplusShutdown GdipLoadImageFromStream GdipDeleteFont GdipDeleteGraphics GdipCloneBrush GdipCreateFromHDC GdipDrawString GdipFree GdipCreateSolidFill GdipCreateFont GdipDisposeImage GdipDrawImageRectI GdipAlloc GdipDeleteBrush GdipCloneImage GdipCreateFontFamilyFromName GdipDeleteFontFamily

Sharing

General

Malware Config

Signatures

File Explorer

34f883de8d3bd1730ba1ecab7c1429ac64b5c954fd218e266d0bb37e6d637788

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

gdiplus

generic