b2da8007fae17263a810a18fb509a5334b553b0bac7437acaf63d706c6bdf2b7

General

Target
b2da8007fae17263a810a18fb509a5334b553b0bac7437acaf63d706c6bdf2b7
Size 6.8MB
Sample260825-lkvvhsgn2z
SHA256 b2da8007fae17263a810a18fb509a5334b553b0bac7437acaf63d706c6bdf2b7
MD5 be16957df3130942e4082ffdc9c2a849
SHA1 808bd5a7cdc22d82a161fbb7e9f9eda20987fa78
SHA512 8514b5df56a4c90953015fd069d6d85394299bf608e5fbb7fa24a258f3fa941fe27c7d21c5fc615a6b985c1084bc6e8e397186177c244cd4c2dc3fa6d8b2a0c2
SSDEEP 98304:Y0shS2b3hx0IJ6L6IacKyRNkll4lPCvqEYAosDB7wlMVYMx3+8eqpM1qu+wXpVPI:Y0ybUIJ6L6IFkll4sPDZpXxuRtqZ
TLSH
T1916623227981D032DBE310318AB9F77D55BD66640B3956DF13D80EBE6F309C26A3252B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2da8007fae17263a810a18fb509a5334b553b0bac7437acaf63d706c6bdf2b7

File Explorer

b2da8007fae17263a810a18fb509a5334b553b0bac7437acaf63d706c6bdf2b7

.exe 6.8MB

b2da8007fae17263a810a18fb509a5334b553b0bac7437acaf63d706c6bdf2b7

IMPHASH 6d7b2341419f7a5d5c0c4155ec3dcb2e
SHA256 b2da8007fae17263a810a18fb509a5334b553b0bac7437acaf63d706c6bdf2b7
MD5 be16957df3130942e4082ffdc9c2a849
SHA1 808bd5a7cdc22d82a161fbb7e9f9eda20987fa78
SHA512 8514b5df56a4c90953015fd069d6d85394299bf608e5fbb7fa24a258f3fa941fe27c7d21c5fc615a6b985c1084bc6e8e397186177c244cd4c2dc3fa6d8b2a0c2
SSDEEP 98304:Y0shS2b3hx0IJ6L6IacKyRNkll4lPCvqEYAosDB7wlMVYMx3+8eqpM1qu+wXpVPI:Y0ybUIJ6L6IFkll4sPDZpXxuRtqZ
TLSH
T1916623227981D032DBE310318AB9F77D55BD66640B3956DF13D80EBE6F309C26A3252B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

332530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\src\_LdsCode\sem\sem_inst\bin\Release\sem_2_test2.pdb

kernel32

Sleep FormatMessageW LocalFree SizeofResource FindFirstFileW FindNextFileW RemoveDirectoryW FindClose GetLastError LockResource LoadResource FindResourceW MoveFileExW lstrcmpiW ReadFile WriteFile SetFilePointer CreateFileW CreateFileA CloseHandle GetFileSize VirtualFree VirtualAlloc GetProcAddress GetModuleHandleW GetVersion IsProcessorFeaturePresent GetSystemDirectoryW LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetThreadAffinityMask ReleaseSemaphore InitializeCriticalSection WaitForSingleObject ResumeThread CreateEventW SetEvent ResetEvent CreateSemaphoreW LoadLibraryW FreeLibrary SetEndOfFile WriteConsoleW HeapSize EncodePointer DecodePointer RaiseException DuplicateHandle WaitForSingleObjectEx GetCurrentProcess SwitchToThread GetCurrentThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW DeleteFileW FindFirstFileExW GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW SetFileAttributesW SetFileTime GetTempPathW AreFileApisANSI SetLastError DeviceIoControl CreateDirectoryExW CopyFileW CreateHardLinkW MultiByteToWideChar WideCharToMultiByte ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive TryAcquireSRWLockShared QueryPerformanceCounter QueryPerformanceFrequency TryEnterCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask RegisterWaitForSingleObject UnregisterWait OutputDebugStringW GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA GetVersionExW VirtualProtect SetProcessAffinityMask InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx WaitForMultipleObjectsEx RtlUnwind ExitThread GetModuleHandleExW ExitProcess GetStdHandle GetCommandLineA GetCommandLineW GetFileSizeEx SetFilePointerEx GetFileType HeapFree HeapAlloc GetTimeZoneInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW HeapReAlloc SetConsoleCtrlHandler IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle RtlCaptureStackBackTrace

shlwapi

PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

b2da8007fae17263a810a18fb509a5334b553b0bac7437acaf63d706c6bdf2b7

kernel32

shlwapi

generic