b48751509d53d041d7c3a6784ee09da55e98a12c256cde489c9c7bee42d0f6f3

General

Target
b48751509d53d041d7c3a6784ee09da55e98a12c256cde489c9c7bee42d0f6f3
Size 6.2MB
Sample260825-qrx1nsshjc
SHA256 b48751509d53d041d7c3a6784ee09da55e98a12c256cde489c9c7bee42d0f6f3
MD5 36dd76b2fc99cb5c004549b353652cab
SHA1 d5d97371dcb3b52c99a7464f231f8579532bf6cf
SHA512 0316b1d48d27d2403f51b85ccaf1ce5cc6c76ae7c15a3287f572ca77febbdf2f12af275c247c5de6a3a599dbc1f5a0a4c3baedf89d0bec72e1db795a975424fa
SSDEEP 98304:2you1dJ6L6IacKyRNkll4lPCvqEYAosDB7wlMVYMx3+8eqpM1qu+wXpVPc3j:XFJ6L6IFkll4sPDZpXxuRtqZ
TLSH
T19A663311B4C1D037D6E30071CEF6E768A46CA9A52B61ABCB77D01CBF4E25AD1A73121B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b48751509d53d041d7c3a6784ee09da55e98a12c256cde489c9c7bee42d0f6f3

File Explorer

b48751509d53d041d7c3a6784ee09da55e98a12c256cde489c9c7bee42d0f6f3

.exe 6.2MB

b48751509d53d041d7c3a6784ee09da55e98a12c256cde489c9c7bee42d0f6f3

IMPHASH c65d44ad1cb5e14b68d27267323fc960
SHA256 b48751509d53d041d7c3a6784ee09da55e98a12c256cde489c9c7bee42d0f6f3
MD5 36dd76b2fc99cb5c004549b353652cab
SHA1 d5d97371dcb3b52c99a7464f231f8579532bf6cf
SHA512 0316b1d48d27d2403f51b85ccaf1ce5cc6c76ae7c15a3287f572ca77febbdf2f12af275c247c5de6a3a599dbc1f5a0a4c3baedf89d0bec72e1db795a975424fa
SSDEEP 98304:2you1dJ6L6IacKyRNkll4lPCvqEYAosDB7wlMVYMx3+8eqpM1qu+wXpVPc3j:XFJ6L6IFkll4sPDZpXxuRtqZ
TLSH
T19A663311B4C1D037D6E30071CEF6E768A46CA9A52B61ABCB77D01CBF4E25AD1A73121B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

180883

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\src\_LdsCode\sem\sem_inst\bin\Release\sem_2_test2.pdb

kernel32

Sleep FormatMessageW LocalFree SizeofResource FindNextFileW FindClose GetLastError LockResource LoadResource FindResourceW WriteFile CreateFileW CloseHandle VirtualFree VirtualAlloc GetProcAddress GetModuleHandleW IsProcessorFeaturePresent LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection DeleteFileW LoadLibraryW FreeLibrary WriteConsoleW HeapSize GetProcessHeap SetStdHandle GetCurrentThreadId GetLocaleInfoEx FindFirstFileExW MultiByteToWideChar WideCharToMultiByte InitOnceComplete InitOnceBeginInitialize ReleaseSRWLockExclusive AcquireSRWLockExclusive QueryPerformanceCounter InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetStringTypeW CompareStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleExW GetStdHandle GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW SetFilePointerEx GetFileType HeapFree HeapAlloc GetTimeZoneInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

shlwapi

PathFileExistsW

Sharing

General

Malware Config

Signatures

File Explorer

b48751509d53d041d7c3a6784ee09da55e98a12c256cde489c9c7bee42d0f6f3

kernel32

shlwapi

generic