777b1d51a21e9e8a21f4c5fb0f35e5959e75ef81178ffbc6c1dbdb276e47464f

Sharing

Copy URL Twitter E-mail

General

Target
777b1d51a21e9e8a21f4c5fb0f35e5959e75ef81178ffbc6c1dbdb276e47464f
Size 120KB
Sample260916-313zhafe96
SHA256 777b1d51a21e9e8a21f4c5fb0f35e5959e75ef81178ffbc6c1dbdb276e47464f
MD5 cd35e87f44151d4548c11bedd65e7fb5
SHA1 7d6bee27516094eeec0b4a8c18ae7b9c644d2aea
SHA512 030c090548e4f58da2659232f3901c88023c78b041023ce32f86a948308d3c84e60159fed774bc7baed1d25d050cb796b141588fc5e10afdd08b2aa5d14d28ff
SSDEEP 1536:vhxBBNDokSNzL++Psdd50lthiSUvK62wuiPSM:vHBBikeAd5UthiSUvK0uiPSM
TLSH
T1CAC3B552F35058A1C8B6A33D04DFE2B9772DFBA642B38B53FB44E7512E436903E95242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
777b1d51a21e9e8a21f4c5fb0f35e5959e75ef81178ffbc6c1dbdb276e47464f

File Explorer

777b1d51a21e9e8a21f4c5fb0f35e5959e75ef81178ffbc6c1dbdb276e47464f

.dll 120KB

777b1d51a21e9e8a21f4c5fb0f35e5959e75ef81178ffbc6c1dbdb276e47464f

IMPHASH 4d0d449d211d9552e5210a6d979ef4e1
SHA256 777b1d51a21e9e8a21f4c5fb0f35e5959e75ef81178ffbc6c1dbdb276e47464f
MD5 cd35e87f44151d4548c11bedd65e7fb5
SHA1 7d6bee27516094eeec0b4a8c18ae7b9c644d2aea
SHA512 030c090548e4f58da2659232f3901c88023c78b041023ce32f86a948308d3c84e60159fed774bc7baed1d25d050cb796b141588fc5e10afdd08b2aa5d14d28ff
SSDEEP 1536:vhxBBNDokSNzL++Psdd50lthiSUvK62wuiPSM:vHBBikeAd5UthiSUvK0uiPSM
TLSH
T1CAC3B552F35058A1C8B6A33D04DFE2B9772DFBA642B38B53FB44E7512E436903E95242
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

BluetoothAddressToString BluetoothAuthenticateDeviceEx BluetoothDisconnectDevice BluetoothEnableDiscovery BluetoothEnableIncomingConnections BluetoothEnumerateInstalledServices BluetoothEnumerateInstalledServicesEx BluetoothEnumerateLocalServices BluetoothFindBrowseGroupClose BluetoothFindClassIdClose BluetoothFindDeviceClose BluetoothFindFirstBrowseGroup BluetoothFindFirstClassId BluetoothFindFirstDevice BluetoothFindFirstProfileDescriptor BluetoothFindFirstProtocolDescriptorStack BluetoothFindFirstProtocolEntry BluetoothFindFirstRadio BluetoothFindFirstService BluetoothFindFirstServiceEx BluetoothFindNextBrowseGroup BluetoothFindNextClassId BluetoothFindNextDevice BluetoothFindNextProfileDescriptor BluetoothFindNextProtocolDescriptorStack BluetoothFindNextProtocolEntry BluetoothFindNextRadio BluetoothFindNextService BluetoothFindProfileDescriptorClose BluetoothFindProtocolDescriptorStackClose BluetoothFindProtocolEntryClose BluetoothFindRadioClose BluetoothFindServiceClose BluetoothGATTAbortReliableWrite BluetoothGATTBeginReliableWrite BluetoothGATTEndReliableWrite BluetoothGATTGetCharacteristicValue BluetoothGATTGetCharacteristics BluetoothGATTGetDescriptorValue BluetoothGATTGetDescriptors BluetoothGATTGetIncludedServices BluetoothGATTGetServices BluetoothGATTRegisterEvent BluetoothGATTSetCharacteristicValue BluetoothGATTSetDescriptorValue BluetoothGATTUnregisterEvent BluetoothGetDeviceInfo BluetoothGetLocalServiceInfo BluetoothGetRadioInfo BluetoothGetServicePnpInstance BluetoothIsConnectable BluetoothIsDiscoverable BluetoothIsVersionAvailable BluetoothRegisterForAuthentication BluetoothRegisterForAuthenticationEx BluetoothRemoveDevice BluetoothSdpEnumAttributes BluetoothSdpGetAttributeValue BluetoothSdpGetContainerElementData BluetoothSdpGetElementData BluetoothSdpGetString BluetoothSendAuthenticationResponse BluetoothSendAuthenticationResponseEx BluetoothSetLocalServiceInfo BluetoothSetServiceState BluetoothSetServiceStateEx BluetoothUnregisterAuthentication BluetoothUpdateDeviceRecord BthpCheckForUnsupportedGuid BthpCleanupBRDeviceNode BthpCleanupDeviceLocalServices BthpCleanupDeviceRemoteServices BthpCleanupLEDeviceNodes BthpEnableAllServices BthpEnableConnectableAndDiscoverable BthpEnableRadioSoftware BthpFindPnpInfo BthpGATTCloseSession BthpInnerRecord BthpIsBluetoothServiceRunning BthpIsConnectableByDefault BthpIsDiscoverable BthpIsDiscoverableByDefault BthpIsRadioSoftwareEnabled BthpIsTopOfServiceGroup BthpMapStatusToErr BthpNextRecord BthpRegisterForAuthentication BthpSetServiceState BthpSetServiceStateEx BthpTranspose16Bits BthpTranspose32Bits BthpTransposeAndExtendBytes DllCanUnloadNow FindNextOpenVCOMPort InstallIncomingComPort ShouldForceAuthentication

Name

.text

Size

32KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

777b1d51a21e9e8a21f4c5fb0f35e5959e75ef81178ffbc6c1dbdb276e47464f

cfgmgr32

kernel32

ntdll

setupapi

ucrtbase

user32

generic