fef9d362d067039aaa489b905ba9c9b0f2eba09785ea1913a41f990278d291ba

Sharing

Copy URL Twitter E-mail

General

Target
fef9d362d067039aaa489b905ba9c9b0f2eba09785ea1913a41f990278d291ba
Size 7.6MB
Sample260821-efppdascng
SHA256 fef9d362d067039aaa489b905ba9c9b0f2eba09785ea1913a41f990278d291ba
MD5 a13a5d437df68b4ae03e0d609f31e79a
SHA1 23c83ba15f53e18b7fa82421bb17006ef8d149ff
SHA512 cd95eeca9c7fb747f305022b524068f24f7aed42f5289344619e5f2afe75c2e6b971aaf2f32f7c395f9d33f4735a3e77ae444c8402cdb7b1b67dd51a60c746d6
SSDEEP 196608:70TrZyyMAWH7dfDgK1EMc8jCWThKRFoIfRl:mO7dfmMvCWlI
TLSH
T140862399B2E904E6D467C67C89728406E7B27C97072086DF0398B6E93FB37914C3DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef9d362d067039aaa489b905ba9c9b0f2eba09785ea1913a41f990278d291ba

File Explorer

fef9d362d067039aaa489b905ba9c9b0f2eba09785ea1913a41f990278d291ba

.exe 7.6MB

fef9d362d067039aaa489b905ba9c9b0f2eba09785ea1913a41f990278d291ba

IMPHASH 110d169163d814ee7bb153c5057bb892
SHA256 fef9d362d067039aaa489b905ba9c9b0f2eba09785ea1913a41f990278d291ba
MD5 a13a5d437df68b4ae03e0d609f31e79a
SHA1 23c83ba15f53e18b7fa82421bb17006ef8d149ff
SHA512 cd95eeca9c7fb747f305022b524068f24f7aed42f5289344619e5f2afe75c2e6b971aaf2f32f7c395f9d33f4735a3e77ae444c8402cdb7b1b67dd51a60c746d6
SSDEEP 196608:70TrZyyMAWH7dfDgK1EMc8jCWThKRFoIfRl:mO7dfmMvCWlI
TLSH
T140862399B2E904E6D467C67C89728406E7B27C97072086DF0398B6E93FB37914C3DB25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16292

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoCreateInstance CoInitializeEx CoUninitialize

oleaut32

SysAllocString SysFreeString VariantInit

advapi32

RegSetValueExW RegDeleteValueW RegOpenKeyExW RegRenameKey RegCloseKey

kernel32

HeapSize HeapReAlloc GetConsoleOutputCP GetConsoleMode GetEnvironmentVariableW CreateDirectoryW CreateFileW DeleteFileW FlushFileBuffers SetFileAttributesW WriteFile OutputDebugStringW CloseHandle GetLastError CreateEventW Sleep GetTickCount GetModuleHandleW GetModuleHandleExW LoadResource LockResource SizeofResource FindResourceW lstrlenW lstrcpynW lstrcatW SetFilePointerEx GetProcessHeap LCMapStringW VirtualProtect WriteConsoleW SetEvent RtlUnwindEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RtlPcToFileHeader RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx

user32

GetSystemMetrics MessageBoxW LoadIconW LoadImageW SendMessageW

shell32

ShellExecuteW

comctl32

InitCommonControlsEx ord345

Name

.text

Size

97KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7.4MB

Virtual Size

7.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

fef9d362d067039aaa489b905ba9c9b0f2eba09785ea1913a41f990278d291ba

ole32

oleaut32

advapi32

kernel32

user32

shell32

comctl32

generic