ff5c4862ac63ae044dacfcb9224c4215c70a947226cf34fc9c4c0acd92e7ac2f

Sharing

Copy URL Twitter E-mail

General

Target
ff5c4862ac63ae044dacfcb9224c4215c70a947226cf34fc9c4c0acd92e7ac2f
Size 74KB
Sample260901-2xebasyend
SHA256 ff5c4862ac63ae044dacfcb9224c4215c70a947226cf34fc9c4c0acd92e7ac2f
MD5 df16f8f540121906e9543fbf488adf10
SHA1 8492a31b63cab312c8d16f11de0d8f05b0f3a97e
SHA512 d0e86f2d5220f7f8c35f58c42caf7061349b3ad0ad1ab1f54c195c9361336e3a5e20eacc66cfcdb267ebb7907c74857b13f05711a62c8a80210522ce763cea3f
SSDEEP 1536:QTU8+z6HtGuAmSOQxWIJZccbpNY0zh1fr1+bPvo:QTUBmHtGuA3xWIJZhDh1fJ+bP
TLSH
T19173B612EED78F16F9B2277858BB66850B7BF960F931830F53AC101C0B6375069A671E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff5c4862ac63ae044dacfcb9224c4215c70a947226cf34fc9c4c0acd92e7ac2f

File Explorer

ff5c4862ac63ae044dacfcb9224c4215c70a947226cf34fc9c4c0acd92e7ac2f

.exe 74KB

ff5c4862ac63ae044dacfcb9224c4215c70a947226cf34fc9c4c0acd92e7ac2f

IMPHASH e9b6b33a332d643e28636ca0e0bd8f77
SHA256 ff5c4862ac63ae044dacfcb9224c4215c70a947226cf34fc9c4c0acd92e7ac2f
MD5 df16f8f540121906e9543fbf488adf10
SHA1 8492a31b63cab312c8d16f11de0d8f05b0f3a97e
SHA512 d0e86f2d5220f7f8c35f58c42caf7061349b3ad0ad1ab1f54c195c9361336e3a5e20eacc66cfcdb267ebb7907c74857b13f05711a62c8a80210522ce763cea3f
SSDEEP 1536:QTU8+z6HtGuAmSOQxWIJZccbpNY0zh1fr1+bPvo:QTUBmHtGuA3xWIJZhDh1fJ+bP
TLSH
T19173B612EED78F16F9B2277858BB66850B7BF960F931830F53AC101C0B6375069A671E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12106

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CreateWaitableTimerW DeleteCriticalSection EnterCriticalSection ExitProcess FillConsoleOutputCharacterW FindResourceExW FlushConsoleInputBuffer FlushFileBuffers FormatMessageW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileType GetLastError GetModuleHandleA GetModuleHandleW GetNumberOfConsoleInputEvents GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetSystemTimeAsFileTime GetTickCount HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryW LoadResource LocalFree LockResource PeekConsoleInputW QueryPerformanceCounter ReadConsoleInputW RtlUnwind SetConsoleCtrlHandler SetConsoleCursorPosition SetLastError SetUnhandledExceptionFilter SetWaitableTimer Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln _wcsicmp abort calloc exit free fwrite malloc memmove signal strncmp towupper vfprintf wcslen wcstol

Name

.text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

456B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ff5c4862ac63ae044dacfcb9224c4215c70a947226cf34fc9c4c0acd92e7ac2f

kernel32

msvcrt

generic