232dcdcdaabc222df07e2fbbfa637d4d8f28cded341b47aeece3d5960d693218

Sharing

Copy URL Twitter E-mail

General

Target
232dcdcdaabc222df07e2fbbfa637d4d8f28cded341b47aeece3d5960d693218
Size 44KB
Sample260910-lktx8a1drg
SHA256 232dcdcdaabc222df07e2fbbfa637d4d8f28cded341b47aeece3d5960d693218
MD5 89c9756a073e6f3e1326fced59426f23
SHA1 17d49462f107467f4249e1465d4b542ca9f37578
SHA512 e47140a5319134a9815500f842497f0723b8c3862e5a08c7aa8b08b7dbc62a16053ce4f5c136595e9e843217c1999afb4f003c812d67d2a67f1b64922ef89334
SSDEEP 768:gEQ+BzWPEQnE+KHM2/qBAbQuASQ+/nGUU7/judLpZAZqPkUeJ8:gzx8Z+Ks2kA8ui2G3+pe8PkTJ8
TLSH
T12723BE03FE548432EFE5547645F97E34506FE8750B6629CB2EA0E04C0DB86D2EBB426B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
232dcdcdaabc222df07e2fbbfa637d4d8f28cded341b47aeece3d5960d693218

File Explorer

232dcdcdaabc222df07e2fbbfa637d4d8f28cded341b47aeece3d5960d693218

.exe 44KB

232dcdcdaabc222df07e2fbbfa637d4d8f28cded341b47aeece3d5960d693218

IMPHASH 20c3dae8b5858a3256f3a0cb80094852
SHA256 232dcdcdaabc222df07e2fbbfa637d4d8f28cded341b47aeece3d5960d693218
MD5 89c9756a073e6f3e1326fced59426f23
SHA1 17d49462f107467f4249e1465d4b542ca9f37578
SHA512 e47140a5319134a9815500f842497f0723b8c3862e5a08c7aa8b08b7dbc62a16053ce4f5c136595e9e843217c1999afb4f003c812d67d2a67f1b64922ef89334
SSDEEP 768:gEQ+BzWPEQnE+KHM2/qBAbQuASQ+/nGUU7/judLpZAZqPkUeJ8:gzx8Z+Ks2kA8ui2G3+pe8PkTJ8
TLSH
T12723BE03FE548432EFE5547645F97E34506FE8750B6629CB2EA0E04C0DB86D2EBB426B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10645

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Dropbox\My Projects\C++ Projects\Ronkor\Release\Ronkor.pdb

kernel32

GetDriveTypeW CreateProcessW GetLogicalDriveStringsW WriteFile ReadFile CreateFileW FlushFileBuffers GetLastError SetFilePointer FindClose LocalAlloc FindNextFileW LocalFree ExpandEnvironmentStringsW CreateThread DecodePointer IsDebuggerPresent FindFirstFileW CreateMutexW GetFileSize GetEnvironmentVariableW GetCurrentDirectoryW ExitProcess IsProcessorFeaturePresent GetTickCount64 GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter EncodePointer

user32

wsprintfW

advapi32

RegCloseKey CryptGenRandom RegCreateKeyW CryptAcquireContextW RegSetValueExW

shell32

ShellExecuteW

ntdll

NtClose RtlAdjustPrivilege NtDelayExecution

urlmon

URLDownloadToFileW URLOpenBlockingStreamW

msvcp110

?_Xlength_error@std@@YAXPBD@Z ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr110

memcpy __CxxFrameHandler3 _CxxThrowException memmove wcsstr _purecall ??3@YAXPAX@Z ??2@YAPAXI@Z _lock _unlock _calloc_crt __dllonexit _onexit _crt_debugger_hook __crtUnhandledException __crtTerminateProcess ??1type_info@@UAE@XZ _XcptFilter __crtGetShowWindowMode _amsg_exit __wgetmainargs __set_app_type exit _exit _cexit _configthreadlocale __setusermatherr _initterm_e _initterm _wcmdln _fmode _commode _except_handler4_common ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _invoke_watson _controlfp_s memset

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.5EhTxsm

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

232dcdcdaabc222df07e2fbbfa637d4d8f28cded341b47aeece3d5960d693218

kernel32

user32

advapi32

shell32

ntdll

urlmon

msvcp110

msvcr110

generic