b96fbd2615bb154bf283ac2e598ee9efb117be488c29eeabbec913edc7600203

Sharing

Copy URL Twitter E-mail

General

Target
b96fbd2615bb154bf283ac2e598ee9efb117be488c29eeabbec913edc7600203
Size 256KB
Sample260903-tmfglsxtcy
SHA256 b96fbd2615bb154bf283ac2e598ee9efb117be488c29eeabbec913edc7600203
MD5 35832e4cce2e16117a02d7557ebad160
SHA1 997a4b7dfaa05673f5a239e63cb40675a59cbcff
SHA512 59958161b8b7d9ecf542cb5a8057dc6a282443581d4943b0e793e6c63195ba08ef1e4b262843ec5a3a2c8a32160d73f03789d00c1e3ad6afc5fa63c458d71d3e
SSDEEP 3072:z5DkORxERHi28NT4xCX+M+nyohPOOt1dwUgziST16MBjdwjfa9ZdXteQbmM:z5Dk1C20xOySO2/wOu16DjfapRF
TLSH
T1F6448D03E39964F8EC69C1759E628232F3B2B42007716BDF064466153EB1FD52E3FA69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b96fbd2615bb154bf283ac2e598ee9efb117be488c29eeabbec913edc7600203

File Explorer

b96fbd2615bb154bf283ac2e598ee9efb117be488c29eeabbec913edc7600203

.exe 256KB

b96fbd2615bb154bf283ac2e598ee9efb117be488c29eeabbec913edc7600203

IMPHASH 9f8ccbd376fc1379926dd1523de4c957
SHA256 b96fbd2615bb154bf283ac2e598ee9efb117be488c29eeabbec913edc7600203
MD5 35832e4cce2e16117a02d7557ebad160
SHA1 997a4b7dfaa05673f5a239e63cb40675a59cbcff
SHA512 59958161b8b7d9ecf542cb5a8057dc6a282443581d4943b0e793e6c63195ba08ef1e4b262843ec5a3a2c8a32160d73f03789d00c1e3ad6afc5fa63c458d71d3e
SSDEEP 3072:z5DkORxERHi28NT4xCX+M+nyohPOOt1dwUgziST16MBjdwjfa9ZdXteQbmM:z5Dk1C20xOySO2/wOu16DjfapRF
TLSH
T1F6448D03E39964F8EC69C1759E628232F3B2B42007716BDF064466153EB1FD52E3FA69
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

75360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

AdjustWindowRect BeginPaint CallWindowProcA CheckMenuItem ClientToScreen CreateIconFromResourceEx CreateWindowExA DefWindowProcA DestroyIcon DestroyMenu DestroyWindow DispatchMessageW EnableWindow EndPaint GetClientRect GetDC GetDlgItem GetMenu GetMessagePos GetMessageW GetParent GetSubMenu GetSystemMetrics GetWindow GetWindowLongPtrA GetWindowLongPtrW GetWindowLongW GetWindowRect InvalidateRect LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringA LoadStringW MessageBoxA MessageBoxW MoveWindow PostMessageW PostQuitMessage RedrawWindow RegisterClassExA ReleaseDC ScreenToClient SendDlgItemMessageW SendMessageA SendMessageW SetActiveWindow SetCursor SetFocus SetWindowLongPtrA SetWindowLongPtrW SetWindowPos SetWindowTextA ShowWindow SystemParametersInfoW TrackPopupMenu TranslateAcceleratorW TranslateMessage wsprintfA

gdi32

BitBlt CloseEnhMetaFile CreateBitmap CreateCompatibleDC CreateDIBitmap CreateEnhMetaFileW CreateFontIndirectW DeleteDC DeleteEnhMetaFile DeleteObject GetEnhMetaFileBits GetTextExtentPointA GetTextMetricsW SelectObject SetBkColor SetTextColor TextOutA

ucrtbase

__acrt_iob_func __p___argc __p___argv __stdio_common_vfprintf __stdio_common_vsprintf _assert _configure_narrow_argv _crt_atexit _errno _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type _strdup _stricmp calloc exit free fwrite getenv malloc memcpy memmove memset realloc strcat strchr strcmp strcpy strcspn strlen strrchr strtol

kernel32

CloseHandle CreateFileA DelayLoadFailureHook GetCommandLineA GetCurrentDirectoryA GetFileAttributesA GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetTickCount HeapAlloc HeapReAlloc IsBadStringPtrA LoadLibraryA MulDiv OpenFile ResolveDelayLoadedAPI SearchPathA _hread _lclose lstrcmpiA

ntdll

_vsnprintf

Name

.text

Size

76KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

28KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

136KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

760B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/43

Size

100KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

48KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

116KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/18

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

36KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b96fbd2615bb154bf283ac2e598ee9efb117be488c29eeabbec913edc7600203

user32

gdi32

ucrtbase

kernel32

ntdll

generic