9090652d85a17b79bc26d803acc00939d8c4fefece0be0ce911857aa4e5089c2

General

Target
9090652d85a17b79bc26d803acc00939d8c4fefece0be0ce911857aa4e5089c2
Size 99KB
Sample260905-pvlldavcma
SHA256 9090652d85a17b79bc26d803acc00939d8c4fefece0be0ce911857aa4e5089c2
MD5 e74f245dc22ea611a56d1a211b375603
SHA1 011634dc0b5b063088bf807616630e5a4ea8b461
SHA512 728ac5f43a0d0d5caed69a138e26e0c11b60d43baf39230a895e41b4ef7508fb6d64bed678b9034d80538ab2072a386393637fb99fd0fe7d3b968a98bc4f4c19
SSDEEP 3072:SqR0aMOGyy06Nlx9RuEb4oP9OJzsH5ylnNd:+OGyy06/Jd4oPUlnNd
TLSH
T13DA32957B3E520F9E1B28A3884954A49D775F8361B219FEF03B442961F237E48D3AB31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9090652d85a17b79bc26d803acc00939d8c4fefece0be0ce911857aa4e5089c2

File Explorer

9090652d85a17b79bc26d803acc00939d8c4fefece0be0ce911857aa4e5089c2

.exe 99KB

9090652d85a17b79bc26d803acc00939d8c4fefece0be0ce911857aa4e5089c2

IMPHASH 5c82018e83dd5f1d305454ecd57a9cf1
SHA256 9090652d85a17b79bc26d803acc00939d8c4fefece0be0ce911857aa4e5089c2
MD5 e74f245dc22ea611a56d1a211b375603
SHA1 011634dc0b5b063088bf807616630e5a4ea8b461
SHA512 728ac5f43a0d0d5caed69a138e26e0c11b60d43baf39230a895e41b4ef7508fb6d64bed678b9034d80538ab2072a386393637fb99fd0fe7d3b968a98bc4f4c19
SSDEEP 3072:SqR0aMOGyy06Nlx9RuEb4oP9OJzsH5ylnNd:+OGyy06/Jd4oPUlnNd
TLSH
T13DA32957B3E520F9E1B28A3884954A49D775F8361B219FEF03B442961F237E48D3AB31
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winstore.app

__managed__Main

api-ms-win-crt-string-l1-1-0

memset

kernel32

FindFirstFileExW WriteConsoleW CloseHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

ntdll

__chkstk wcschr

api-ms-win-core-com-l1-1-0

CoIncrementMTAUsage

Name

.text

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9090652d85a17b79bc26d803acc00939d8c4fefece0be0ce911857aa4e5089c2

winstore.app

api-ms-win-crt-string-l1-1-0

kernel32

ntdll

api-ms-win-core-com-l1-1-0

generic