0718a4ee47da2f499ee122ac96ce915c8bb9ea14cf5fa59984c40923d1ec9a3c

Sharing

Copy URL Twitter E-mail

General

Target
0718a4ee47da2f499ee122ac96ce915c8bb9ea14cf5fa59984c40923d1ec9a3c
Size 78KB
Sample260824-lzervawbjh
SHA256 0718a4ee47da2f499ee122ac96ce915c8bb9ea14cf5fa59984c40923d1ec9a3c
MD5 a3955bf38654ce418ed1810b4935c3bc
SHA1 caa137aecb267c62dc5ad838808baa541bba1f05
SHA512 01b1be1d21643b26065979cb3dcf67e2a38a20c0ed545f55f015d8d3faf5af6e524227190fee494d7df8e98dda1bd98fa4afa01695f4599e6d06117be16d71e1
SSDEEP 768:IAxN4sfNTIp2kQHo4IDsBRDaVjX7gb2XlHYFzzI7uuSey0zjK4398:r5VB/o4IDs3DUz7XXlszzIdBbzjK4398
TLSH
T18B73282BF7C22869C1A7D638857B53B1E232F4450733A25F7B44C6661EE07922F2E364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0718a4ee47da2f499ee122ac96ce915c8bb9ea14cf5fa59984c40923d1ec9a3c

File Explorer

0718a4ee47da2f499ee122ac96ce915c8bb9ea14cf5fa59984c40923d1ec9a3c

.dll 78KB

0718a4ee47da2f499ee122ac96ce915c8bb9ea14cf5fa59984c40923d1ec9a3c

IMPHASH 707a723176c41de13a7e6093b1a9271c
SHA256 0718a4ee47da2f499ee122ac96ce915c8bb9ea14cf5fa59984c40923d1ec9a3c
MD5 a3955bf38654ce418ed1810b4935c3bc
SHA1 caa137aecb267c62dc5ad838808baa541bba1f05
SHA512 01b1be1d21643b26065979cb3dcf67e2a38a20c0ed545f55f015d8d3faf5af6e524227190fee494d7df8e98dda1bd98fa4afa01695f4599e6d06117be16d71e1
SSDEEP 768:IAxN4sfNTIp2kQHo4IDsBRDaVjX7gb2XlHYFzzI7uuSey0zjK4398:r5VB/o4IDs3DUz7XXlszzIdBbzjK4398
TLSH
T18B73282BF7C22869C1A7D638857B53B1E232F4450733A25F7B44C6661EE07922F2E364
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

BluetoothAddressToString BluetoothAuthenticateDeviceEx BluetoothDisconnectDevice BluetoothEnableDiscovery BluetoothEnableIncomingConnections BluetoothEnumerateInstalledServices BluetoothEnumerateInstalledServicesEx BluetoothEnumerateLocalServices BluetoothFindBrowseGroupClose BluetoothFindClassIdClose BluetoothFindDeviceClose BluetoothFindFirstBrowseGroup BluetoothFindFirstClassId BluetoothFindFirstDevice BluetoothFindFirstProfileDescriptor BluetoothFindFirstProtocolDescriptorStack BluetoothFindFirstProtocolEntry BluetoothFindFirstRadio BluetoothFindFirstService BluetoothFindFirstServiceEx BluetoothFindNextBrowseGroup BluetoothFindNextClassId BluetoothFindNextDevice BluetoothFindNextProfileDescriptor BluetoothFindNextProtocolDescriptorStack BluetoothFindNextProtocolEntry BluetoothFindNextRadio BluetoothFindNextService BluetoothFindProfileDescriptorClose BluetoothFindProtocolDescriptorStackClose BluetoothFindProtocolEntryClose BluetoothFindRadioClose BluetoothFindServiceClose BluetoothGATTAbortReliableWrite BluetoothGATTBeginReliableWrite BluetoothGATTEndReliableWrite BluetoothGATTGetCharacteristicValue BluetoothGATTGetCharacteristics BluetoothGATTGetDescriptorValue BluetoothGATTGetDescriptors BluetoothGATTGetIncludedServices BluetoothGATTGetServices BluetoothGATTRegisterEvent BluetoothGATTSetCharacteristicValue BluetoothGATTSetDescriptorValue BluetoothGATTUnregisterEvent BluetoothGetDeviceInfo BluetoothGetLocalServiceInfo BluetoothGetRadioInfo BluetoothGetServicePnpInstance BluetoothIsConnectable BluetoothIsDiscoverable BluetoothIsVersionAvailable BluetoothRegisterForAuthentication BluetoothRegisterForAuthenticationEx BluetoothRemoveDevice BluetoothSdpEnumAttributes BluetoothSdpGetAttributeValue BluetoothSdpGetContainerElementData BluetoothSdpGetElementData BluetoothSdpGetString BluetoothSendAuthenticationResponse BluetoothSendAuthenticationResponseEx BluetoothSetLocalServiceInfo BluetoothSetServiceState BluetoothSetServiceStateEx BluetoothUnregisterAuthentication BluetoothUpdateDeviceRecord BthpCheckForUnsupportedGuid BthpCleanupBRDeviceNode BthpCleanupDeviceLocalServices BthpCleanupDeviceRemoteServices BthpCleanupLEDeviceNodes BthpEnableAllServices BthpEnableConnectableAndDiscoverable BthpEnableRadioSoftware BthpFindPnpInfo BthpGATTCloseSession BthpInnerRecord BthpIsBluetoothServiceRunning BthpIsConnectableByDefault BthpIsDiscoverable BthpIsDiscoverableByDefault BthpIsRadioSoftwareEnabled BthpIsTopOfServiceGroup BthpMapStatusToErr BthpNextRecord BthpRegisterForAuthentication BthpSetServiceState BthpSetServiceStateEx BthpTranspose16Bits BthpTranspose32Bits BthpTransposeAndExtendBytes DllCanUnloadNow FindNextOpenVCOMPort InstallIncomingComPort ShouldForceAuthentication

Name

.text

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

0718a4ee47da2f499ee122ac96ce915c8bb9ea14cf5fa59984c40923d1ec9a3c

cfgmgr32

kernel32

ntdll

setupapi

ucrtbase

user32

generic