01026eeb6740416643e509737c175b93bb0dffab7397c7eb214182581d12596c

General

Target
01026eeb6740416643e509737c175b93bb0dffab7397c7eb214182581d12596c
Size 637KB
Sample260906-xpqbda1blh
SHA256 01026eeb6740416643e509737c175b93bb0dffab7397c7eb214182581d12596c
MD5 77ae92c65629250a6c4fb741215e5b87
SHA1 10cdc6fdd7a104f4ffee6d9b8169fbf189be4ab5
SHA512 4ae0b9563bb289be1adc499349cd50909347b28388b63dd9d5c87a1cd28c8a856be56bd424825c33d65623c1625f4426712f7d6b0c207f72b6248967bde5eb2e
SSDEEP 12288:tJLspSYnEv2GvjuYps9d0alKwnNe/QCwvqidmXi:/IpFnEv3uYzalKwkPghdYi
TLSH
T117D45AD2E6045DD2DD99913CC4690209DAE0AC710322C3EB75DC987ADE8B2CB5E3DF66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01026eeb6740416643e509737c175b93bb0dffab7397c7eb214182581d12596c

File Explorer

01026eeb6740416643e509737c175b93bb0dffab7397c7eb214182581d12596c

.exe 637KB

01026eeb6740416643e509737c175b93bb0dffab7397c7eb214182581d12596c

IMPHASH 0f4f0c3e62a9e9cfa3fe2208af74764a
SHA256 01026eeb6740416643e509737c175b93bb0dffab7397c7eb214182581d12596c
MD5 77ae92c65629250a6c4fb741215e5b87
SHA1 10cdc6fdd7a104f4ffee6d9b8169fbf189be4ab5
SHA512 4ae0b9563bb289be1adc499349cd50909347b28388b63dd9d5c87a1cd28c8a856be56bd424825c33d65623c1625f4426712f7d6b0c207f72b6248967bde5eb2e
SSDEEP 12288:tJLspSYnEv2GvjuYps9d0alKwnNe/QCwvqidmXi:/IpFnEv3uYzalKwkPghdYi
TLSH
T117D45AD2E6045DD2DD99913CC4690209DAE0AC710322C3EB75DC987ADE8B2CB5E3DF66
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

428652

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cdb.pdb

kernel32

FillConsoleOutputAttribute SetConsoleTitleA GetFileType WaitForSingleObject PeekNamedPipe CreateEventA GetCurrentProcessId CreateNamedPipeA CreateFileA CreateThread SetThreadPriority CloseHandle MultiByteToWideChar LoadLibraryA GetProcAddress GetVersionExA SetLastError SetConsoleTextAttribute GetCurrentProcess CreateProcessA GetPriorityClass SetStdHandle Beep SetConsoleCtrlHandler GetEnvironmentVariableA FreeLibrary GetCommandLineA GetCommandLineW SetPriorityClass SetProcessShutdownParameters GetCurrentThread InitializeCriticalSection ExpandEnvironmentStringsA WriteFile OutputDebugStringA ExitProcess DuplicateHandle GetConsoleMode GetComputerNameA GetModuleFileNameA FormatMessageA GetModuleHandleA LocalFree RaiseException GetSystemTime SystemTimeToFileTime UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleW SetUnhandledExceptionFilter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind ReadFile WriteConsoleA FillConsoleOutputCharacterA SetConsoleCursorPosition WideCharToMultiByte ReadConsoleW GetLastError ReadConsoleA GetConsoleScreenBufferInfo GetStdHandle LeaveCriticalSection SetEvent EnterCriticalSection VirtualProtect Sleep LocalAlloc

msvcrt

?terminate@@YAXXZ realloc _onexit _lock __dllonexit _unlock __set_app_type _fmode _commode __setusermatherr _amsg_exit _initterm _cexit _exit _XcptFilter __C_specific_handler __getmainargs _strlwr __CxxFrameHandler strtoul sscanf atoi calloc rewind fgetwc feof tolower _strnicmp _stricmp getenv free wcsstr malloc isspace printf _purecall strncat _vsnprintf isprint _spawnlp strrchr memmove strchr fclose fgets memset exit _iob fopen memcmp

dbgeng

DebugCreate DebugConnect

advapi32

RegCreateKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExA RegSetValueExA

Sharing

General

Malware Config

Signatures

File Explorer

01026eeb6740416643e509737c175b93bb0dffab7397c7eb214182581d12596c

kernel32

msvcrt

dbgeng

advapi32

generic