451b7728b215254676d6a9677d672659e168002843a4d7eec15a21fbe170f195

General

Target
451b7728b215254676d6a9677d672659e168002843a4d7eec15a21fbe170f195
Size 129KB
Sample260916-hnvr5sgl41
SHA256 451b7728b215254676d6a9677d672659e168002843a4d7eec15a21fbe170f195
MD5 19488e1c7d72e19bef6f2ada72e2fa7a
SHA1 44dc544403f629315a3c132e118a79909dac6463
SHA512 15a6ee6f8d3c34e94bb9a656fedb0c0ef9a24a2a059782a4f7187e2b7bf52490bfc216dea2e8e0ff71bb66d75e742e3a7b0e4f99b7c8d0a9120b84c29c9cd46e
SSDEEP 3072:4jpM8JL7LF2OVG/klkjHGkwdCC/fLh/h7az4Eh/vY7A:4NXZUH0dr/5BQF/vI
TLSH
T1D7D3E0E992A3CD85CC2E813988DB9638F33079262625830F5F71065DEDAE7F1FE52085
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
451b7728b215254676d6a9677d672659e168002843a4d7eec15a21fbe170f195

File Explorer

451b7728b215254676d6a9677d672659e168002843a4d7eec15a21fbe170f195

.exe 129KB

451b7728b215254676d6a9677d672659e168002843a4d7eec15a21fbe170f195

IMPHASH 2cdbd745fbefdbd8554eeeea9f014d14
SHA256 451b7728b215254676d6a9677d672659e168002843a4d7eec15a21fbe170f195
MD5 19488e1c7d72e19bef6f2ada72e2fa7a
SHA1 44dc544403f629315a3c132e118a79909dac6463
SHA512 15a6ee6f8d3c34e94bb9a656fedb0c0ef9a24a2a059782a4f7187e2b7bf52490bfc216dea2e8e0ff71bb66d75e742e3a7b0e4f99b7c8d0a9120b84c29c9cd46e
SSDEEP 3072:4jpM8JL7LF2OVG/klkjHGkwdCC/fLh/h7az4Eh/vY7A:4NXZUH0dr/5BQF/vI
TLSH
T1D7D3E0E992A3CD85CC2E813988DB9638F33079262625830F5F71065DEDAE7F1FE52085
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\MSF\Desktop\wall\wall\x64\Release\wall.pdb

kernel32

SizeofResource WriteFile CreateFileW LockResource CloseHandle LoadResource FindResourceW GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent

user32

SystemParametersInfoW

vcruntime140

memcpy __std_exception_destroy __std_exception_copy __C_specific_handler _CxxThrowException __current_exception __current_exception_context memset

api-ms-win-crt-runtime-l1-1-0

exit _initterm _initialize_narrow_environment __p___argc __p___argv _exit _initterm_e _invalid_parameter_noinfo_noreturn _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _set_app_type _configure_narrow_argv _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit terminate _cexit _c_exit

api-ms-win-crt-heap-l1-1-0

malloc free _set_new_mode _callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

451b7728b215254676d6a9677d672659e168002843a4d7eec15a21fbe170f195

kernel32

user32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic