b10d24a3f734dbc01df26fb221385d194cee790e0191348b4af595cf040e1fce

General

Target
b10d24a3f734dbc01df26fb221385d194cee790e0191348b4af595cf040e1fce
Size 108KB
Sample260913-knef9seq2t
SHA256 b10d24a3f734dbc01df26fb221385d194cee790e0191348b4af595cf040e1fce
MD5 ae3af93f66a027f2f75ee39430c06d3d
SHA1 6294263caed39c90c432bb694d5ffa507aa17ff6
SHA512 39d5df06aae5bbca655028e79f28c84276fbcbc8f4f716235240c536ea4856123e52e6ae4afa0513a2f78a698e2f1a562fc7dc448fe2765454c4eca0448d1bcd
SSDEEP 1536:QhY9kgbZkdHCF7hcVsn+GArKM0afTvdZNPB9tIxpDXnznmVdm/g/jZv:+Y+85cF7Bd99tIH3DmVdm/g/1v
TLSH
T166B37C1279D2C473E0660A71C98A87C2577F7D137B76919FFB480A0A1EA12907B367B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b10d24a3f734dbc01df26fb221385d194cee790e0191348b4af595cf040e1fce

File Explorer

b10d24a3f734dbc01df26fb221385d194cee790e0191348b4af595cf040e1fce

.exe 108KB

b10d24a3f734dbc01df26fb221385d194cee790e0191348b4af595cf040e1fce

IMPHASH 6ad3e0bf2f839602c87c445c99fe20bb
SHA256 b10d24a3f734dbc01df26fb221385d194cee790e0191348b4af595cf040e1fce
MD5 ae3af93f66a027f2f75ee39430c06d3d
SHA1 6294263caed39c90c432bb694d5ffa507aa17ff6
SHA512 39d5df06aae5bbca655028e79f28c84276fbcbc8f4f716235240c536ea4856123e52e6ae4afa0513a2f78a698e2f1a562fc7dc448fe2765454c4eca0448d1bcd
SSDEEP 1536:QhY9kgbZkdHCF7hcVsn+GArKM0afTvdZNPB9tIxpDXnznmVdm/g/jZv:+Y+85cF7Bd99tIH3DmVdm/g/1v
TLSH
T166B37C1279D2C473E0660A71C98A87C2577F7D137B76919FFB480A0A1EA12907B367B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15301

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\svn\EliteIV3.3\drivers\install\install\setup98\Release\win98\setup.pdb

setupapi

SetupDiDestroyDriverInfoList SetupDiInstallDevice SetupDiSetSelectedDriverA SetupDiEnumDriverInfoA SetupDiBuildDriverInfoList SetupDiSetDeviceInstallParamsA SetupDiGetDeviceInstallParamsA SetupDiGetINFClassA SetupDiDestroyDeviceInfoList SetupDiGetClassDevsA SetupQueryInfVersionInformationA SetupGetInfInformationA SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInfo SetupDiRemoveDevice

kernel32

HeapSize WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle RtlUnwind InitializeCriticalSection GetStdHandle WriteFile LoadResource LockResource SizeofResource FindFirstFileA FindClose CreateDirectoryA FlushFileBuffers CreateFileA GetLastError SetFileTime CloseHandle FindResourceA GetSystemDirectoryA DeleteFileA GetTempPathA LocalFree LocalAlloc MultiByteToWideChar lstrlenA LoadLibraryA GetProcAddress FreeLibrary GetModuleFileNameA GetWindowsDirectoryA GetFullPathNameA CopyFileA SystemTimeToFileTime GetACP GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement RaiseException GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW LeaveCriticalSection EnterCriticalSection Sleep GetLocaleInfoA VirtualAlloc HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode

advapi32

RegCloseKey RegOpenKeyA RegCreateKeyA RegSetValueExA

Sharing

General

Malware Config

Signatures

File Explorer

b10d24a3f734dbc01df26fb221385d194cee790e0191348b4af595cf040e1fce

setupapi

kernel32

advapi32

generic