8eace2e0a1428d7d2d0053d103ebf74712698fa4192d5665da5dc960e59d9d66

Sharing

Copy URL Twitter E-mail

General

Target
8eace2e0a1428d7d2d0053d103ebf74712698fa4192d5665da5dc960e59d9d66
Size 215KB
Sample260831-has2dsfa36
SHA256 8eace2e0a1428d7d2d0053d103ebf74712698fa4192d5665da5dc960e59d9d66
MD5 0dd90ad395d4b2f5c15c278912d8f104
SHA1 493ffbb41f27f6ab7ae5e50d6a580fd2fd02bf73
SHA512 7a32b500a0c456dfcb7738feab075cef893ec4591dffab8f5f2756b448844a8e84032dacf1ad63ed02d4b28c1b3ac28e3d919c71f7f55c1458a5cccb74ab3263
SSDEEP 3072:TKwK9dhzTfENKC1yLVrrrRnORVo2WtYnrVKu9XtXlVv4ma1uijudals0v2PdGSUy:TK3/zCqFwQuzsF4AAf
TLSH
T15C24636067E84546E676A7385AF603317B3BFE815E35CF0F5A00A26D1C32EC0EEA5716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eace2e0a1428d7d2d0053d103ebf74712698fa4192d5665da5dc960e59d9d66

File Explorer

8eace2e0a1428d7d2d0053d103ebf74712698fa4192d5665da5dc960e59d9d66

.dll 215KB

8eace2e0a1428d7d2d0053d103ebf74712698fa4192d5665da5dc960e59d9d66

IMPHASH a12f1cb19da9f50d7d1ecc50b237749a
SHA256 8eace2e0a1428d7d2d0053d103ebf74712698fa4192d5665da5dc960e59d9d66
MD5 0dd90ad395d4b2f5c15c278912d8f104
SHA1 493ffbb41f27f6ab7ae5e50d6a580fd2fd02bf73
SHA512 7a32b500a0c456dfcb7738feab075cef893ec4591dffab8f5f2756b448844a8e84032dacf1ad63ed02d4b28c1b3ac28e3d919c71f7f55c1458a5cccb74ab3263
SSDEEP 3072:TKwK9dhzTfENKC1yLVrrrRnORVo2WtYnrVKu9XtXlVv4ma1uijudals0v2PdGSUy:TK3/zCqFwQuzsF4AAf
TLSH
T15C24636067E84546E676A7385AF603317B3BFE815E35CF0F5A00A26D1C32EC0EEA5716
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8256

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

comctl32

PropertySheetW

gdi32

CreateCompatibleDC DeleteDC GetTextExtentPoint32A GetTextExtentPoint32W

kernel32

GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrW

kernelbase

DisableThreadLibraryCalls GetLocaleInfoA GetLocaleInfoEx GetModuleHandleW GetProcAddress GetTickCount GlobalAlloc GlobalFree MulDiv MultiByteToWideChar RegCloseKey RegCreateKeyExA RegGetValueA RegOpenKeyExA RegSetValueExA

ntdll

LdrGetDllHandle NtQueryVirtualMemory RtlFindExportedRoutineByName _vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup _wcsdup atoi calloc free fwrite getenv malloc memcmp memcpy memmove memset realloc strchr strcmp strcpy strcspn strlen strncmp wcscmp wcstombs

user32

CreateDialogParamW DestroyWindow DispatchMessageW EnableWindow GetDialogBaseUnits GetDlgCtrlID GetDlgItem GetScrollInfo GetWindowRect IsDialogMessageW IsWindowEnabled LoadStringW MessageBoxW PeekMessageW SendDlgItemMessageW SendMessageA SendMessageW SetDlgItemInt SetDlgItemTextW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow TranslateMessage

Name

.text

Size

44KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8eace2e0a1428d7d2d0053d103ebf74712698fa4192d5665da5dc960e59d9d66

comctl32

gdi32

kernel32

kernelbase

ntdll

ucrtbase

user32

generic