e861e83164f4192e59d7c792444e3eb506310d1da999e424703ffc59e2f6e0ea

General

Target
e861e83164f4192e59d7c792444e3eb506310d1da999e424703ffc59e2f6e0ea
Size 759KB
Sample260826-kf8edavfre
SHA256 e861e83164f4192e59d7c792444e3eb506310d1da999e424703ffc59e2f6e0ea
MD5 a467ab869d6b5a075b11e20885972398
SHA1 ab7fea3af2ea7b349ca903fd8451a4037dc87596
SHA512 078cc5f1512315262be5d0306478ea88aa61916656f2c2b2561fa6ffb58b37e892288b904ece44f2995f8371a828e38dc54a262caafc060f49da84ef353d9fca
SSDEEP 12288:ufOWle/e+TQB+XCREfdeYfBEJHsCIVD/OU1xF7fgQzj5aQLo7McnRoMj6Vy8SvKS:mtlemaQBSffoaEJsCIY+7f7AJ71jgyYO
TLSH
T169F4BD2277F80A68F8F36E3158748F25963BBC359D34EB6E2640215E1D38A51DA71B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e861e83164f4192e59d7c792444e3eb506310d1da999e424703ffc59e2f6e0ea

File Explorer

e861e83164f4192e59d7c792444e3eb506310d1da999e424703ffc59e2f6e0ea

.exe 759KB

e861e83164f4192e59d7c792444e3eb506310d1da999e424703ffc59e2f6e0ea

IMPHASH cd3b2d99c6655a5d4a14e30e380f5bf9
SHA256 e861e83164f4192e59d7c792444e3eb506310d1da999e424703ffc59e2f6e0ea
MD5 a467ab869d6b5a075b11e20885972398
SHA1 ab7fea3af2ea7b349ca903fd8451a4037dc87596
SHA512 078cc5f1512315262be5d0306478ea88aa61916656f2c2b2561fa6ffb58b37e892288b904ece44f2995f8371a828e38dc54a262caafc060f49da84ef353d9fca
SSDEEP 12288:ufOWle/e+TQB+XCREfdeYfBEJHsCIVD/OU1xF7fgQzj5aQLo7McnRoMj6Vy8SvKS:mtlemaQBSffoaEJsCIY+7f7AJ71jgyYO
TLSH
T169F4BD2277F80A68F8F36E3158748F25963BBC359D34EB6E2640215E1D38A51DA71B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

47296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle SetFilePointerEx AreFileApisANSI CopyFileW GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Name

.text

Size

87KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

93KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

e861e83164f4192e59d7c792444e3eb506310d1da999e424703ffc59e2f6e0ea

kernel32

ole32

generic