8da25b8a546cd37d557518892deed5e742f83b2177639d3d5491a6a0db665d6f

General

Target
8da25b8a546cd37d557518892deed5e742f83b2177639d3d5491a6a0db665d6f
Size 3.0MB
Sample260910-31jkvsaj7v
SHA256 8da25b8a546cd37d557518892deed5e742f83b2177639d3d5491a6a0db665d6f
MD5 1e42539ca673dfaca9a3da077c2660ea
SHA1 936b6dcdf60e9315cd5bdf6520503de27724cc2c
SHA512 a1b16b1fbbbb21c30c2b244190e909ff986a6d698b2fec1a5a0aceeae15ec418e4453c1dca5b8dedd3f12e71c6236806214a80cea3fe24a4246a5c097292e29a
SSDEEP 49152:DcDSjsdbDw1nw5m4Mt0jCZLwi5R3W7pf+VAj04kZxWSPprs6:DDYFw1kML3WFfRzkZTPpH
TLSH
T110E5CF25FC36D189ECE38070BF39D221D5322D77DF2C226B91DD89900465DEEA62E17A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8da25b8a546cd37d557518892deed5e742f83b2177639d3d5491a6a0db665d6f

File Explorer

8da25b8a546cd37d557518892deed5e742f83b2177639d3d5491a6a0db665d6f

.exe 3.0MB

8da25b8a546cd37d557518892deed5e742f83b2177639d3d5491a6a0db665d6f

IMPHASH 73109aabc46d7fe64b61778f5bdbb540
SHA256 8da25b8a546cd37d557518892deed5e742f83b2177639d3d5491a6a0db665d6f
MD5 1e42539ca673dfaca9a3da077c2660ea
SHA1 936b6dcdf60e9315cd5bdf6520503de27724cc2c
SHA512 a1b16b1fbbbb21c30c2b244190e909ff986a6d698b2fec1a5a0aceeae15ec418e4453c1dca5b8dedd3f12e71c6236806214a80cea3fe24a4246a5c097292e29a
SSDEEP 49152:DcDSjsdbDw1nw5m4Mt0jCZLwi5R3W7pf+VAj04kZxWSPprs6:DDYFw1kML3WFfRzkZTPpH
TLSH
T110E5CF25FC36D189ECE38070BF39D221D5322D77DF2C226B91DD89900465DEEA62E17A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2229316

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AcquireSRWLockExclusive CloseHandle CreateFileW DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

MessageBoxW

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

comctl32

InitCommonControlsEx

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

84KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.TLS

Size

641KB

Virtual Size

641KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

8da25b8a546cd37d557518892deed5e742f83b2177639d3d5491a6a0db665d6f

kernel32

user32

advapi32

comctl32

generic