dcbbb1f6da3a27d7da472aaed8591d2f28a4f6f0efc632d7f81a730116f10508

Sharing

Copy URL Twitter E-mail

General

Target
dcbbb1f6da3a27d7da472aaed8591d2f28a4f6f0efc632d7f81a730116f10508
Size 1.4MB
Sample260907-cpp1dsvvbt
SHA256 dcbbb1f6da3a27d7da472aaed8591d2f28a4f6f0efc632d7f81a730116f10508
MD5 b825091be91e1d424c6312da4f332def
SHA1 e4be9a0942c990f3259a7def290868ba20cda519
SHA512 f8c4966505029143e69c7602944caf4e8dfb53b29e3244b224d9c8075716a848f22d28bd9270c76cd208142017307e95c0348f9001787f1f249dfc3ecfeb12f3
SSDEEP 24576:lw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LF:zKjKWQc2b1FVgbjrjxPe1pbPSQm1Floa
TLSH
T14365220172E08074F5F21A30A970D6B55BBEFD746931AA0B13991E3D6F38981EA35B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcbbb1f6da3a27d7da472aaed8591d2f28a4f6f0efc632d7f81a730116f10508

File Explorer

dcbbb1f6da3a27d7da472aaed8591d2f28a4f6f0efc632d7f81a730116f10508

.exe 1.4MB

dcbbb1f6da3a27d7da472aaed8591d2f28a4f6f0efc632d7f81a730116f10508

IMPHASH d6d33cfa83489bf5ba9c5b52261af2b7
SHA256 dcbbb1f6da3a27d7da472aaed8591d2f28a4f6f0efc632d7f81a730116f10508
MD5 b825091be91e1d424c6312da4f332def
SHA1 e4be9a0942c990f3259a7def290868ba20cda519
SHA512 f8c4966505029143e69c7602944caf4e8dfb53b29e3244b224d9c8075716a848f22d28bd9270c76cd208142017307e95c0348f9001787f1f249dfc3ecfeb12f3
SSDEEP 24576:lw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LF:zKjKWQc2b1FVgbjrjxPe1pbPSQm1Floa
TLSH
T14365220172E08074F5F21A30A970D6B55BBEFD746931AA0B13991E3D6F38981EA35B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

TEST_mi_exe_stub.pdb

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW OutputDebugStringW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx ReadFile CreateFileW CloseHandle WriteConsoleW DecodePointer GetExitCodeProcess CreateProcessW WaitForSingleObject SetFilePointer CreateDirectoryW SizeofResource RemoveDirectoryW GetTempPathW FormatMessageW LockResource DeleteFileW FindResourceExW LoadResource FindResourceW HeapDestroy LocalFree VerSetConditionMask CopyFileW VerifyVersionInfoW GetTempFileNameW lstrcmpiW UnmapViewOfFile CreateFileMappingW MapViewOfFile VirtualQuery

shlwapi

PathQuoteSpacesW PathAppendW

ole32

CoUninitialize CoInitializeEx

shell32

SHGetFolderPathW ord680

user32

MessageBoxW CharLowerBuffW

Sharing

General

Malware Config

Signatures

File Explorer

dcbbb1f6da3a27d7da472aaed8591d2f28a4f6f0efc632d7f81a730116f10508

kernel32

shlwapi

ole32

shell32

user32

generic