45a086989f41cc9765ffcfa851120e9abe234481c2e50e6b3c9a39eda11071b4

Sharing

Copy URL Twitter E-mail

General

Target
45a086989f41cc9765ffcfa851120e9abe234481c2e50e6b3c9a39eda11071b4
Size 59KB
Sample260901-2xebasyene
SHA256 45a086989f41cc9765ffcfa851120e9abe234481c2e50e6b3c9a39eda11071b4
MD5 dbb807cfe56a109239c0dd9e951ae5c5
SHA1 6d3fd51330b9e00d3f00d4bc91dc82d331d85734
SHA512 ac7377e2a0d1ad5503a4d06e9d83dce973f7fe85ccfa2845dc0597c1240b5ff090b802f3e8222abadc74278879d7dbd166839d8c0faae8d5273ecba152f2b669
SSDEEP 768:7/XJ3G4/2f+3KIiavdrSywbyeYpPMd7ID0Re9d1DGgN7+tO08FFjQtfQP1cflOm6:7dg+8DY2d7IDZNXFOgqbCviV2BKQ7f
TLSH
T16D430A0EFBE78FF3CDA01974ACBB8559C325F6647630890FA7944428297276496EB30D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45a086989f41cc9765ffcfa851120e9abe234481c2e50e6b3c9a39eda11071b4

File Explorer

45a086989f41cc9765ffcfa851120e9abe234481c2e50e6b3c9a39eda11071b4

.exe 59KB

45a086989f41cc9765ffcfa851120e9abe234481c2e50e6b3c9a39eda11071b4

IMPHASH 438d6d9d72ea1468d2e1ae9fcd335f95
SHA256 45a086989f41cc9765ffcfa851120e9abe234481c2e50e6b3c9a39eda11071b4
MD5 dbb807cfe56a109239c0dd9e951ae5c5
SHA1 6d3fd51330b9e00d3f00d4bc91dc82d331d85734
SHA512 ac7377e2a0d1ad5503a4d06e9d83dce973f7fe85ccfa2845dc0597c1240b5ff090b802f3e8222abadc74278879d7dbd166839d8c0faae8d5273ecba152f2b669
SSDEEP 768:7/XJ3G4/2f+3KIiavdrSywbyeYpPMd7ID0Re9d1DGgN7+tO08FFjQtfQP1cflOm6:7dg+8DY2d7IDZNXFOgqbCviV2BKQ7f
TLSH
T16D430A0EFBE78FF3CDA01974ACBB8559C325F6647630890FA7944428297276496EB30D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12346

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection FillConsoleOutputCharacterW FindClose FindFirstFileW FindNextFileW FindResourceExW FlushFileBuffers FormatMessageW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileType GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetSystemTimeAsFileTime GetTickCount GetVolumeInformationW HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryW LoadResource LocalFree LockResource QueryPerformanceCounter RtlUnwind SetConsoleCursorPosition SetCurrentDirectoryW SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WideCharToMultiByte WriteConsoleW WriteFile

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln abort calloc exit free fwrite malloc memmove realloc signal strncmp towlower vfprintf swprintf wcscat wcscmp wcscpy wcslen wcstok

Name

.text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

620B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

45a086989f41cc9765ffcfa851120e9abe234481c2e50e6b3c9a39eda11071b4

kernel32

msvcrt

generic