56e203816e1b04ccb0b847c82a54b0af2b7a0d2b44b6490f93afffe1c479e45f

Sharing

Copy URL Twitter E-mail

General

Target
56e203816e1b04ccb0b847c82a54b0af2b7a0d2b44b6490f93afffe1c479e45f
Size 59KB
Sample260916-mbmm8aae47
SHA256 56e203816e1b04ccb0b847c82a54b0af2b7a0d2b44b6490f93afffe1c479e45f
MD5 540c1877b9d155428b4ffb2c95c0a250
SHA1 c0ae5a8f460e0b1fc83c491531cabe648b8f937e
SHA512 f15243a82eb7eca866b659e6d5a1bffc802ef6a9eadeb25ef02b0cdd8ae5c4be8182985458d9d7b98f71d01c7fce9a1b51ee5bd8ac15388a0674c3a8e4c08892
SSDEEP 768:V/XJ3G4/2f+3KIiavdrSywbyeYmJMd7ID0Re9d1DGgN7+tO08FFjQtfQP1cflOmZ:Vdg+8DY3d7IDZNXFOgqbCviC2BKQ7f
TLSH
T1C3430A0EFBE78FF3CDA01974ACBB8559C325F6647630890FA7944428297276496EB30D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56e203816e1b04ccb0b847c82a54b0af2b7a0d2b44b6490f93afffe1c479e45f

File Explorer

56e203816e1b04ccb0b847c82a54b0af2b7a0d2b44b6490f93afffe1c479e45f

.exe 59KB

56e203816e1b04ccb0b847c82a54b0af2b7a0d2b44b6490f93afffe1c479e45f

IMPHASH 438d6d9d72ea1468d2e1ae9fcd335f95
SHA256 56e203816e1b04ccb0b847c82a54b0af2b7a0d2b44b6490f93afffe1c479e45f
MD5 540c1877b9d155428b4ffb2c95c0a250
SHA1 c0ae5a8f460e0b1fc83c491531cabe648b8f937e
SHA512 f15243a82eb7eca866b659e6d5a1bffc802ef6a9eadeb25ef02b0cdd8ae5c4be8182985458d9d7b98f71d01c7fce9a1b51ee5bd8ac15388a0674c3a8e4c08892
SSDEEP 768:V/XJ3G4/2f+3KIiavdrSywbyeYmJMd7ID0Re9d1DGgN7+tO08FFjQtfQP1cflOmZ:Vdg+8DY3d7IDZNXFOgqbCviC2BKQ7f
TLSH
T1C3430A0EFBE78FF3CDA01974ACBB8559C325F6647630890FA7944428297276496EB30D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12346

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection FillConsoleOutputCharacterW FindClose FindFirstFileW FindNextFileW FindResourceExW FlushFileBuffers FormatMessageW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileType GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetSystemTimeAsFileTime GetTickCount GetVolumeInformationW HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryW LoadResource LocalFree LockResource QueryPerformanceCounter RtlUnwind SetConsoleCursorPosition SetCurrentDirectoryW SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WideCharToMultiByte WriteConsoleW WriteFile

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln abort calloc exit free fwrite malloc memmove realloc signal strncmp towlower vfprintf swprintf wcscat wcscmp wcscpy wcslen wcstok

Name

.text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

620B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

56e203816e1b04ccb0b847c82a54b0af2b7a0d2b44b6490f93afffe1c479e45f

kernel32

msvcrt

generic