08fb9b1ae972ac527612c0680cf09b9e441c105e0fac03b9fe780ec90aef5b46

General

Target
08fb9b1ae972ac527612c0680cf09b9e441c105e0fac03b9fe780ec90aef5b46
Size 636KB
Sample260908-twtetsvane
SHA256 08fb9b1ae972ac527612c0680cf09b9e441c105e0fac03b9fe780ec90aef5b46
MD5 67810d74dcbe0642e41fbde2121f06e1
SHA1 3782bfaa901eb9206aa46f3f5cff8517ba306d52
SHA512 59ac55966ea8d91a93dd1cfd68c3443b6336de76f5e791c8cd0c6c90beb3c9db22f6930cd7618086a2bc20e4ddfb0a13f7f2ee572f7c7f910721c78e919d90c0
SSDEEP 12288:PqcpSYnEv2GvDBes9D0WcHNkA0A7OdW2+Ho3t0tjAih:vpFnEvfB+WcHuDCo3tmjAy
TLSH
T120D45AD6E6045DD2CD99913CD5690609EAE07C720322C3DB75CC883ADE4B2CAAE3DF65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08fb9b1ae972ac527612c0680cf09b9e441c105e0fac03b9fe780ec90aef5b46

File Explorer

08fb9b1ae972ac527612c0680cf09b9e441c105e0fac03b9fe780ec90aef5b46

.exe 636KB

08fb9b1ae972ac527612c0680cf09b9e441c105e0fac03b9fe780ec90aef5b46

IMPHASH 9819eaf8a4aec968580d0094ff009163
SHA256 08fb9b1ae972ac527612c0680cf09b9e441c105e0fac03b9fe780ec90aef5b46
MD5 67810d74dcbe0642e41fbde2121f06e1
SHA1 3782bfaa901eb9206aa46f3f5cff8517ba306d52
SHA512 59ac55966ea8d91a93dd1cfd68c3443b6336de76f5e791c8cd0c6c90beb3c9db22f6930cd7618086a2bc20e4ddfb0a13f7f2ee572f7c7f910721c78e919d90c0
SSDEEP 12288:PqcpSYnEv2GvDBes9D0WcHNkA0A7OdW2+Ho3t0tjAih:vpFnEvfB+WcHuDCo3tmjAy
TLSH
T120D45AD6E6045DD2CD99913CD5690609EAE07C720322C3DB75CC883ADE4B2CAAE3DF65
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

429004

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ntsd.pdb

kernel32

SetConsoleTextAttribute FillConsoleOutputAttribute SetConsoleTitleA GetFileType WaitForSingleObject PeekNamedPipe CreateEventA GetCurrentProcessId CreateNamedPipeA CreateThread SetThreadPriority CloseHandle MultiByteToWideChar LoadLibraryA GetProcAddress GetVersionExA SetLastError OutputDebugStringA GetCurrentProcess CreateProcessA GetPriorityClass SetStdHandle Beep SetConsoleCtrlHandler GetEnvironmentVariableA FreeLibrary GetCommandLineA GetCommandLineW SetPriorityClass SetProcessShutdownParameters GetCurrentThread InitializeCriticalSection ExpandEnvironmentStringsA WriteFile ExitProcess CreateFileA DuplicateHandle AllocConsole GetComputerNameA GetModuleFileNameA FormatMessageA GetModuleHandleA LocalFree RaiseException GetSystemTime SystemTimeToFileTime UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleW SetUnhandledExceptionFilter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind ReadFile WriteConsoleA FillConsoleOutputCharacterA SetConsoleCursorPosition WideCharToMultiByte ReadConsoleW GetLastError ReadConsoleA GetConsoleScreenBufferInfo GetStdHandle LeaveCriticalSection SetEvent EnterCriticalSection VirtualProtect Sleep LocalAlloc

msvcrt

?terminate@@YAXXZ realloc _onexit _lock __dllonexit _unlock __set_app_type _fmode _commode __setusermatherr _amsg_exit _initterm _cexit _exit _XcptFilter __C_specific_handler __getmainargs _strlwr __CxxFrameHandler strtoul sscanf atoi calloc rewind fgetwc feof tolower _strnicmp _stricmp getenv free wcsstr malloc isspace printf _purecall memmove strchr fclose fgets strncat _vsnprintf isprint _spawnlp strrchr memset exit _iob fopen memcmp

dbgeng

DebugCreate DebugConnect

advapi32

RegCreateKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExA RegSetValueExA

Sharing

General

Malware Config

Signatures

File Explorer

08fb9b1ae972ac527612c0680cf09b9e441c105e0fac03b9fe780ec90aef5b46

kernel32

msvcrt

dbgeng

advapi32

generic