651e057ead3c2f7b58a11348bb66e17c5fdc7066ea40a96d2f95332afda5a5f0

General

Target
651e057ead3c2f7b58a11348bb66e17c5fdc7066ea40a96d2f95332afda5a5f0
Size 131KB
Sample260820-rblhda1zaz
SHA256 651e057ead3c2f7b58a11348bb66e17c5fdc7066ea40a96d2f95332afda5a5f0
MD5 ee119f867cb649be5d3eb658c18a473f
SHA1 7fc9968bac9cec95a26a65a87319bed4fcba733b
SHA512 3bc2ff9bc811005a41f44f14a4589b430c985eb0c15a80042373e0c07f1d241e75fc30d020a5d09b23cc89c7e318b24a86ecfadffa0c0bfdf351fdf6ad7c2eb8
SSDEEP 3072:1SkSRLlydef1DpZNIY3GN67Fl+6OHNv3lInO5pmRcbWawH2:1SD6ef1s67Fl7OtvKtzaI2
TLSH
T16DD39E4175D1C072E8B215716974AF718A3EFC300F545ECB73CC2A6A9F342C1AA35AAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
651e057ead3c2f7b58a11348bb66e17c5fdc7066ea40a96d2f95332afda5a5f0

File Explorer

651e057ead3c2f7b58a11348bb66e17c5fdc7066ea40a96d2f95332afda5a5f0

.exe 131KB

651e057ead3c2f7b58a11348bb66e17c5fdc7066ea40a96d2f95332afda5a5f0

IMPHASH 528dab191664b9bdd0d608a719034435
SHA256 651e057ead3c2f7b58a11348bb66e17c5fdc7066ea40a96d2f95332afda5a5f0
MD5 ee119f867cb649be5d3eb658c18a473f
SHA1 7fc9968bac9cec95a26a65a87319bed4fcba733b
SHA512 3bc2ff9bc811005a41f44f14a4589b430c985eb0c15a80042373e0c07f1d241e75fc30d020a5d09b23cc89c7e318b24a86ecfadffa0c0bfdf351fdf6ad7c2eb8
SSDEEP 3072:1SkSRLlydef1DpZNIY3GN67Fl+6OHNv3lInO5pmRcbWawH2:1SD6ef1s67Fl7OtvKtzaI2
TLSH
T16DD39E4175D1C072E8B215716974AF718A3EFC300F545ECB73CC2A6A9F342C1AA35AAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

DialogBoxParamW LoadIconW LoadCursorW EndPaint BeginPaint UpdateWindow GetSystemMetrics TranslateAcceleratorW LoadAcceleratorsW EndDialog LoadStringW ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage GetMessageW

kernel32

GetModuleHandleExW WriteConsoleW CreateFileW CloseHandle DecodePointer GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize SetFilePointerEx GetProcessHeap LCMapStringW LoadLibraryExW VirtualProtect QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW IsProcessorFeaturePresent RaiseException RtlUnwind GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetProcAddress IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc HeapReAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW

Name

.text

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

651e057ead3c2f7b58a11348bb66e17c5fdc7066ea40a96d2f95332afda5a5f0

user32

kernel32

generic