0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37

Sharing

Copy URL Twitter E-mail

General

Target
0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37
Size 348KB
Sample260831-fdlelsvdlf
SHA256 0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37
MD5 62419a34f5e72decb6169dc306ac4d55
SHA1 b5b17c740d15df5ba668784ab9b2569b36be32a4
SHA512 741192fc61d3d8a33685f275b442cbf6656448ae1ff2b9193c7d8ea7575cc3d32e7151a8b1ac6f7cefe0a463253adfa97a099686159809163d745a154d2fc559
SSDEEP 6144:VwC8XPO4Anq98VAkQJzGb78DZY5K7wNiDohtlFsz10sse:VP6O4j9UA3JzGbae5owEDoHss
TLSH
T158749E0AF7A914F9E5779178C8130906E772BC5607A0DADF23A04A972F276E09E3F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37

File Explorer

0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37

.exe 348KB

0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37

IMPHASH b1a756f0c408be3042b4238d2e7b6f4a
SHA256 0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37
MD5 62419a34f5e72decb6169dc306ac4d55
SHA1 b5b17c740d15df5ba668784ab9b2569b36be32a4
SHA512 741192fc61d3d8a33685f275b442cbf6656448ae1ff2b9193c7d8ea7575cc3d32e7151a8b1ac6f7cefe0a463253adfa97a099686159809163d745a154d2fc559
SSDEEP 6144:VwC8XPO4Anq98VAkQJzGb78DZY5K7wNiDohtlFsz10sse:VP6O4j9UA3JzGbae5owEDoHss
TLSH
T158749E0AF7A914F9E5779178C8130906E772BC5607A0DADF23A04A972F276E09E3F711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

89240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\danar\OneDrive\Рабочий стол\Sources\Add\macosos\x64\Release\macosos.pdb

kernel32

GetLocalTime GetLastError GetSystemTimeAsFileTime SetEndOfFile GetFileAttributesW ExitProcess DeleteFileW CreateDirectoryW WriteConsoleW HeapSize CreateFileW GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetStringTypeW WideCharToMultiByte GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive Sleep CloseHandle WaitForSingleObjectEx GetExitCodeThread InitializeCriticalSectionEx GetModuleHandleW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx WakeAllConditionVariable GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW RtlUnwind

advapi32

RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW SHGetKnownFolderPath ShellExecuteExW

ole32

CoTaskMemFree

urlmon

URLDownloadToFileW

Sharing

General

Malware Config

Signatures

File Explorer

0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37

kernel32

advapi32

shell32

ole32

urlmon

generic