254a00b31c2f8338afaa566f806dd86c4eb14ed14da7c4436c784eeed7812690

Sharing

Copy URL Twitter E-mail

General

Target
254a00b31c2f8338afaa566f806dd86c4eb14ed14da7c4436c784eeed7812690
Size 143KB
Sample260916-2c9xgafa63
SHA256 254a00b31c2f8338afaa566f806dd86c4eb14ed14da7c4436c784eeed7812690
MD5 f2c67ee5e2dca22cdcc10ce3b9e1d2ff
SHA1 0983676eee07a3f3732dde9064c4362553db8ab3
SHA512 c54ef9c5d0e1a2d142df6f73b77c4e533e2874d78b88540e5d45f192123e80e0397ce3f82a2712520fb22279e9a4d19d55d9a597abcf994e0185500bf5d1631d
SSDEEP 1536:QCcAuK2sVyqmaIXRid1eW+LwEK85QUvMFMQiNNRrhHvIjAXVW:QCcAdXMigLwEK854ER9HvzFW
TLSH
T1ACE3F7DBBBA5DC97D911433C05D68326233EF7908B834B171D206A351B13FA07F9665A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
254a00b31c2f8338afaa566f806dd86c4eb14ed14da7c4436c784eeed7812690

File Explorer

254a00b31c2f8338afaa566f806dd86c4eb14ed14da7c4436c784eeed7812690

.exe 143KB

254a00b31c2f8338afaa566f806dd86c4eb14ed14da7c4436c784eeed7812690

IMPHASH df10b39de27987b91736b0a4dfdb6477
SHA256 254a00b31c2f8338afaa566f806dd86c4eb14ed14da7c4436c784eeed7812690
MD5 f2c67ee5e2dca22cdcc10ce3b9e1d2ff
SHA1 0983676eee07a3f3732dde9064c4362553db8ab3
SHA512 c54ef9c5d0e1a2d142df6f73b77c4e533e2874d78b88540e5d45f192123e80e0397ce3f82a2712520fb22279e9a4d19d55d9a597abcf994e0185500bf5d1631d
SSDEEP 1536:QCcAuK2sVyqmaIXRid1eW+LwEK85QUvMFMQiNNRrhHvIjAXVW:QCcAdXMigLwEK854ER9HvzFW
TLSH
T1ACE3F7DBBBA5DC97D911433C05D68326233EF7908B834B171D206A351B13FA07F9665A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

BitBlt CreateBitmap CreateCompatibleDC CreateDIBSection CreateSolidBrush DeleteDC DeleteObject Ellipse GetBitmapBits PatBlt PlgBlt SelectObject SetBitmapBits SetBkColor SetTextColor StretchBlt TextOutW

kernel32

CloseHandle CreateThread DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetStartupInfoA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter Sleep TerminateProcess TerminateThread TlsGetValue UnhandledExceptionFilter VirtualAlloc VirtualProtect VirtualQuery

msvcrt

__C_specific_handler __dllonexit __getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _fmode _initterm _lock _onexit _unlock abort calloc exit fprintf free fwrite malloc memcpy rand signal strlen strncmp vfprintf wcslen

user32

GetDC GetDesktopWindow GetSystemMetrics GetWindowRect InvalidateRect ReleaseDC

Name

.text

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

756B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

696B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

768B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/92

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

254a00b31c2f8338afaa566f806dd86c4eb14ed14da7c4436c784eeed7812690

gdi32

kernel32

msvcrt

user32

generic