2806426408f84457294b7dbc3b66bb194f87c182f11d9e448da33696e83bb23e

General

Target
2806426408f84457294b7dbc3b66bb194f87c182f11d9e448da33696e83bb23e
Size 96KB
Sample260916-2r256swfja
SHA256 2806426408f84457294b7dbc3b66bb194f87c182f11d9e448da33696e83bb23e
MD5 2ffd1a0260f5a4bb3fca1e725a6177b0
SHA1 3f4fc94fcd1c0f8d925d4e9f779e3c4cf9b90606
SHA512 2c265f4beeba4d453bc49aa07953cf17a677308075ce5c049d48493be37a5bb47346f5aa9d0cc2a733491c7f637fa0340fc889a8e719a8af4dd390a203a0b3d8
SSDEEP 1536:SQjHJWeI/6cofIH3NT73Y7Ih2VQXIIeWso8i:SuHJWeI/mfW9wa6QYIfs
TLSH
T190A3192AB183433BC1027FB54B5449FAB772AD206832C0F773D92B1F897A9957F1851A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2806426408f84457294b7dbc3b66bb194f87c182f11d9e448da33696e83bb23e

File Explorer

2806426408f84457294b7dbc3b66bb194f87c182f11d9e448da33696e83bb23e

.exe 96KB

2806426408f84457294b7dbc3b66bb194f87c182f11d9e448da33696e83bb23e

IMPHASH a12d186f65c99f872323a61923ce70d8
SHA256 2806426408f84457294b7dbc3b66bb194f87c182f11d9e448da33696e83bb23e
MD5 2ffd1a0260f5a4bb3fca1e725a6177b0
SHA1 3f4fc94fcd1c0f8d925d4e9f779e3c4cf9b90606
SHA512 2c265f4beeba4d453bc49aa07953cf17a677308075ce5c049d48493be37a5bb47346f5aa9d0cc2a733491c7f637fa0340fc889a8e719a8af4dd390a203a0b3d8
SSDEEP 1536:SQjHJWeI/6cofIH3NT73Y7Ih2VQXIIeWso8i:SuHJWeI/mfW9wa6QYIfs
TLSH
T190A3192AB183433BC1027FB54B5449FAB772AD206832C0F773D92B1F897A9957F1851A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

55120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer CreateFileW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource DeleteFileA CopyFileA MoveFileA CreateProcessA FindFirstFileA TerminateProcess FindClose

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW

Name

.text

Size

50KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.code

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2806426408f84457294b7dbc3b66bb194f87c182f11d9e448da33696e83bb23e

kernel32

oleaut32

user32

generic