40dd97250481695e691c90a7f69abd6a59400abf0cdb764fb431a30fb432b94d

Sharing

Copy URL Twitter E-mail

General

Target
40dd97250481695e691c90a7f69abd6a59400abf0cdb764fb431a30fb432b94d
Size 137KB
Sample260830-2gb61atthw
SHA256 40dd97250481695e691c90a7f69abd6a59400abf0cdb764fb431a30fb432b94d
MD5 d5b496828315b54b965fdb6957549c77
SHA1 613c7e5abc99f14f9d92c368eede6bd94aae2f77
SHA512 2ffd1e69d2774c093cb85f390435c7f825dbb8e96de611cbd1168bb6588de1b6929a5413d910f1529000ffc08bc110a2ac211ac86a61f49167259d225b8cc7e8
SSDEEP 1536:taemheexoabo0D51HBgQT0xQ/V3JmD8zURHmwcj9EYeypZH9jN0QWAFDBG2zt9vu:taeCzxJs0Dv+xyZrAR3c1pZdjmmV3wv
TLSH
T1CFD37D237655A1EDD44AC07482558AA7B77270C50F325BFF03A9063C2FAA9F66F3C624
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40dd97250481695e691c90a7f69abd6a59400abf0cdb764fb431a30fb432b94d

File Explorer

40dd97250481695e691c90a7f69abd6a59400abf0cdb764fb431a30fb432b94d

.exe 137KB

40dd97250481695e691c90a7f69abd6a59400abf0cdb764fb431a30fb432b94d

IMPHASH e1e8a578b0a91b9b5b2279beddf8fed6
SHA256 40dd97250481695e691c90a7f69abd6a59400abf0cdb764fb431a30fb432b94d
MD5 d5b496828315b54b965fdb6957549c77
SHA1 613c7e5abc99f14f9d92c368eede6bd94aae2f77
SHA512 2ffd1e69d2774c093cb85f390435c7f825dbb8e96de611cbd1168bb6588de1b6929a5413d910f1529000ffc08bc110a2ac211ac86a61f49167259d225b8cc7e8
SSDEEP 1536:taemheexoabo0D51HBgQT0xQ/V3JmD8zURHmwcj9EYeypZH9jN0QWAFDBG2zt9vu:taeCzxJs0Dv+xyZrAR3c1pZdjmmV3wv
TLSH
T1CFD37D237655A1EDD44AC07482558AA7B77270C50F325BFF03A9063C2FAA9F66F3C624
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

93360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-fc459faa79b9b4aa.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context memset _CxxThrowException __C_specific_handler __current_exception memcpy memmove __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

40dd97250481695e691c90a7f69abd6a59400abf0cdb764fb431a30fb432b94d

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic