0728bce5df74c6974db3c814fd086213f1aab611ef9a56d9021fa2eea8b4e337

General

Target
0728bce5df74c6974db3c814fd086213f1aab611ef9a56d9021fa2eea8b4e337
Size 105KB
Sample260822-mk32katblg
SHA256 0728bce5df74c6974db3c814fd086213f1aab611ef9a56d9021fa2eea8b4e337
MD5 5b3a2871acdec3c62afe07bdaf8d79d2
SHA1 48ef6bfe66c3db8a7fc66c95a5215bc33f9dfa84
SHA512 38338d32c605d73daef9f675e8adc40a544ac919386c3ad75a6238c904d01400dfbf0383f141c892a95d1329922ad6d0e4fdaaa7d362906d9d6a468ff30d7ed9
SSDEEP 3072:HkhAUtRVEkFhTS2GvLZnAsEAilQ2jNAgnClzY/GsEE4RXb1eRC8xvVXF:QTS2G3ErQRBEh4SvVXF
TLSH
T1B3B37D5175C1C072E972197958B4EEB1863DF9340F619EEB339406BD4E342C29A33EAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0728bce5df74c6974db3c814fd086213f1aab611ef9a56d9021fa2eea8b4e337

File Explorer

0728bce5df74c6974db3c814fd086213f1aab611ef9a56d9021fa2eea8b4e337

.exe 105KB

0728bce5df74c6974db3c814fd086213f1aab611ef9a56d9021fa2eea8b4e337

IMPHASH a14cbe42e1e6317e76e3915b9f0726f9
SHA256 0728bce5df74c6974db3c814fd086213f1aab611ef9a56d9021fa2eea8b4e337
MD5 5b3a2871acdec3c62afe07bdaf8d79d2
SHA1 48ef6bfe66c3db8a7fc66c95a5215bc33f9dfa84
SHA512 38338d32c605d73daef9f675e8adc40a544ac919386c3ad75a6238c904d01400dfbf0383f141c892a95d1329922ad6d0e4fdaaa7d362906d9d6a468ff30d7ed9
SSDEEP 3072:HkhAUtRVEkFhTS2GvLZnAsEAilQ2jNAgnClzY/GsEE4RXb1eRC8xvVXF:QTS2G3ErQRBEh4SvVXF
TLSH
T1B3B37D5175C1C072E972197958B4EEB1863DF9340F619EEB339406BD4E342C29A33EAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

10016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\33\source\repos\2026-08-21\Release\donut.pdb

kernel32

GetModuleHandleA GetProcAddress WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW IsProcessorFeaturePresent RtlUnwind RaiseException GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree IsDebuggerPresent UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers DecodePointer

bcrypt

BCryptCloseAlgorithmProvider BCryptGenerateSymmetricKey BCryptDecrypt BCryptDestroyKey BCryptDeriveKeyPBKDF2 BCryptOpenAlgorithmProvider BCryptSetProperty

Name

.text

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0728bce5df74c6974db3c814fd086213f1aab611ef9a56d9021fa2eea8b4e337

kernel32

bcrypt

generic