ec550149c199113fa2ac60e7faf0715bf94b78087c5b38e13d4e248aa8f3d3ef

General

Target
ec550149c199113fa2ac60e7faf0715bf94b78087c5b38e13d4e248aa8f3d3ef
Size 6.1MB
Sample260821-pltwdstyhv
SHA256 ec550149c199113fa2ac60e7faf0715bf94b78087c5b38e13d4e248aa8f3d3ef
MD5 5ec81a5debb68e0d15951391c2fda8da
SHA1 10a066d0df9d51162935156c5144c1d647231931
SHA512 450686d90f6c3aa1ea1d93ae284b4e8e1f6ff4921807eedbb405df683acfe83dd1492ac68fea7b26e81a30545f2a6b3b1ce45fbd3c791bb6a099b97fc1cb9a60
SSDEEP 98304:8nyDesRzexkHYh+O8lVuV9WHx5TBq3ci+CSqvhE1uuNJK5zprvwESRuzZP209iAi:FDn0xkS6+V9IpBq3Jvio5NQRuzx20Vi
TLSH
T1A2563311F486C0B2D6A306B41D7AF2B85AAECDB80F6191C7B7E41E95CE345D15B32B0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec550149c199113fa2ac60e7faf0715bf94b78087c5b38e13d4e248aa8f3d3ef

File Explorer

ec550149c199113fa2ac60e7faf0715bf94b78087c5b38e13d4e248aa8f3d3ef

.exe 6.1MB

ec550149c199113fa2ac60e7faf0715bf94b78087c5b38e13d4e248aa8f3d3ef

IMPHASH 034b4bae14b211d29952ccf2db5b9a55
SHA256 ec550149c199113fa2ac60e7faf0715bf94b78087c5b38e13d4e248aa8f3d3ef
MD5 5ec81a5debb68e0d15951391c2fda8da
SHA1 10a066d0df9d51162935156c5144c1d647231931
SHA512 450686d90f6c3aa1ea1d93ae284b4e8e1f6ff4921807eedbb405df683acfe83dd1492ac68fea7b26e81a30545f2a6b3b1ce45fbd3c791bb6a099b97fc1cb9a60
SSDEEP 98304:8nyDesRzexkHYh+O8lVuV9WHx5TBq3ci+CSqvhE1uuNJK5zprvwESRuzZP209iAi:FDn0xkS6+V9IpBq3Jvio5NQRuzx20Vi
TLSH
T1A2563311F486C0B2D6A306B41D7AF2B85AAECDB80F6191C7B7E41E95CE345D15B32B0B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

164631

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\src\_LdsCode\sem\sem_inst\bin\Release\sem_2_test2.pdb

kernel32

Sleep FormatMessageW LocalFree SizeofResource FindNextFileW FindClose GetLastError LockResource LoadResource FindResourceW ReadFile WriteFile CreateFileW CloseHandle VirtualFree VirtualAlloc GetProcAddress GetModuleHandleW IsProcessorFeaturePresent LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetTempPathW DeleteFileW LoadLibraryW FreeLibrary WriteConsoleW HeapSize SetStdHandle GetCurrentThreadId GetLocaleInfoEx FindFirstFileExW MultiByteToWideChar WideCharToMultiByte InitOnceComplete InitOnceBeginInitialize ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW QueryPerformanceCounter WakeAllConditionVariable InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetStringTypeW CompareStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW GetFileSizeEx SetFilePointerEx GetFileType HeapFree HeapAlloc GetTimeZoneInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetEndOfFile

shlwapi

PathFileExistsW

Sharing

General

Malware Config

Signatures

File Explorer

ec550149c199113fa2ac60e7faf0715bf94b78087c5b38e13d4e248aa8f3d3ef

kernel32

shlwapi

generic