2bb642224acd19ce525511a5e442e259b048ef63ff0dff8c8c04f96902d9579c

General

Target
2bb642224acd19ce525511a5e442e259b048ef63ff0dff8c8c04f96902d9579c
Size 97KB
Sample260916-3bfgxa1w9m
SHA256 2bb642224acd19ce525511a5e442e259b048ef63ff0dff8c8c04f96902d9579c
MD5 c5f1e4f1f459f54aaf0bee26db864931
SHA1 6c5806c35bf3b995aa297dadd2fa81ea87dab796
SHA512 547dd9781156c67e2d356f21e080e5d6f3846bbf394a9794860a7611d7255139fdc7df4bcd53266aacf8818dd2ea9d851efcc0d609081ab1e490e87b6baebe7d
SSDEEP 1536:lQjHJWeI/6cofIH3NT73Y7Ih2V1XIItWso8i:luHJWeI/mfW9wa61YIYs
TLSH
T10CA3192AB183437BC1027FB54B5449FAB762EC206832C0F773D92B1F897A9957F1851A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bb642224acd19ce525511a5e442e259b048ef63ff0dff8c8c04f96902d9579c

File Explorer

2bb642224acd19ce525511a5e442e259b048ef63ff0dff8c8c04f96902d9579c

.exe 97KB

2bb642224acd19ce525511a5e442e259b048ef63ff0dff8c8c04f96902d9579c

IMPHASH a12d186f65c99f872323a61923ce70d8
SHA256 2bb642224acd19ce525511a5e442e259b048ef63ff0dff8c8c04f96902d9579c
MD5 c5f1e4f1f459f54aaf0bee26db864931
SHA1 6c5806c35bf3b995aa297dadd2fa81ea87dab796
SHA512 547dd9781156c67e2d356f21e080e5d6f3846bbf394a9794860a7611d7255139fdc7df4bcd53266aacf8818dd2ea9d851efcc0d609081ab1e490e87b6baebe7d
SSDEEP 1536:lQjHJWeI/6cofIH3NT73Y7Ih2V1XIItWso8i:luHJWeI/mfW9wa61YIYs
TLSH
T10CA3192AB183437BC1027FB54B5449FAB762EC206832C0F773D92B1F897A9957F1851A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

55120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer CreateFileW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource DeleteFileA CopyFileA MoveFileA CreateProcessA FindFirstFileA TerminateProcess FindClose

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW

Name

.text

Size

50KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.code

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2bb642224acd19ce525511a5e442e259b048ef63ff0dff8c8c04f96902d9579c

kernel32

oleaut32

user32

generic