7c10d571f05db22c7fbd0bd7a93b59f22d44a2b9934a6583071d7fb561475225

Sharing

Copy URL Twitter E-mail

General

Target
7c10d571f05db22c7fbd0bd7a93b59f22d44a2b9934a6583071d7fb561475225
Size 4.7MB
Sample260916-mkl32sts7l
SHA256 7c10d571f05db22c7fbd0bd7a93b59f22d44a2b9934a6583071d7fb561475225
MD5 ceca097e5da32efd20d114f171eec4d9
SHA1 66963b31c62a393d58f0a45b8581149c8fe9631e
SHA512 5fa8c9a1350de610420a86f102ccc187f4a68a0f9ae1607ea1889752a66bd421be439b9fd5f2c33d7ef53afa2f06d717f3de6c76e9f5dc547fcd828fd9c8dce2
SSDEEP 98304:UlufTMFIZtSc0MQvYw70Ketc+Sx8po3xh8MASKL59ldt49mm0Q:UlurMuZgLjge0KelXmBh8MASKL59o
TLSH
T12436DFC55FA3C4ABC051027615A48E7AF496CC8DEEB3AABF24ADF43350735D98CB6250
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c10d571f05db22c7fbd0bd7a93b59f22d44a2b9934a6583071d7fb561475225

File Explorer

7c10d571f05db22c7fbd0bd7a93b59f22d44a2b9934a6583071d7fb561475225

.exe 4.7MB

7c10d571f05db22c7fbd0bd7a93b59f22d44a2b9934a6583071d7fb561475225

IMPHASH a57d67955be15ea1eae557d2f936f0ae
SHA256 7c10d571f05db22c7fbd0bd7a93b59f22d44a2b9934a6583071d7fb561475225
MD5 ceca097e5da32efd20d114f171eec4d9
SHA1 66963b31c62a393d58f0a45b8581149c8fe9631e
SHA512 5fa8c9a1350de610420a86f102ccc187f4a68a0f9ae1607ea1889752a66bd421be439b9fd5f2c33d7ef53afa2f06d717f3de6c76e9f5dc547fcd828fd9c8dce2
SSDEEP 98304:UlufTMFIZtSc0MQvYw70Ketc+Sx8po3xh8MASKL59ldt49mm0Q:UlurMuZgLjge0KelXmBh8MASKL59o
TLSH
T12436DFC55FA3C4ABC051027615A48E7AF496CC8DEEB3AABF24ADF43350735D98CB6250
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97488

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

LoadLibraryW GetProcAddress FreeLibrary CreateDirectoryW SetLastError GetCommandLineW FindNextFileW GetCurrentProcess GetStdHandle FindClose MultiByteToWideChar GetLastError GlobalFlags GetSystemInfo GetCurrentDirectoryW SetCurrentDirectoryW CreateProcessW GetModuleHandleW WideCharToMultiByte VirtualQuery HeapFree HeapReAlloc HeapAlloc GetProcessHeap SetEvent CreateThread ResetEvent GetLocalTime GetSystemTimeAsFileTime lstrcpynW WriteConsoleW HeapSize FlushFileBuffers GetTickCount SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetConsoleMode GetConsoleOutputCP SetFilePointerEx GetFileType GetCommandLineA GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WaitForSingleObjectEx DeleteCriticalSection FindResourceW LoadResource LockResource FreeResource GetCurrentThreadId InitializeCriticalSection ExitProcess SizeofResource MulDiv GlobalUnlock GlobalLock GlobalFree GlobalAlloc LeaveCriticalSection EnterCriticalSection TryEnterCriticalSection GetProcessHandleCount TerminateProcess OpenProcess GetCurrentProcessId WriteFile IsDebuggerPresent CreateEventW GetModuleFileNameW InitializeCriticalSectionAndSpinCount Sleep CloseHandle CreateFileW GetStringTypeW

user32

DispatchMessageW TranslateMessage ReleaseDC MessageBoxW GetMessageW GetDC LoadImageW GetParent GetDesktopWindow LoadCursorW LoadIconW LoadStringW GetWindowLongPtrW SendMessageW GetWindowThreadProcessId MonitorFromWindow WaitForInputIdle EnumWindows

gdi32

SelectObject CreateDIBSection SetDIBColorTable CreateCompatibleDC GetDeviceCaps DeleteDC GetObjectW DeleteObject

shell32

SHGetSpecialFolderPathW

ole32

CoUninitialize CoInitializeEx CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime VariantTimeToSystemTime

comctl32

ImageList_Destroy ImageList_Create ImageList_AddMasked

gdiplus

GdipCreateBitmapFromScan0 GdiplusStartup GdiplusShutdown GdipGetImageHeight GdipGetImagePaletteSize GdipCloneImage GdipBitmapUnlockBits GdipCreateBitmapFromStream GdipAlloc GdipDrawImageRectI GdipDisposeImage GdipGetImagePixelFormat GdipFree GdipBitmapLockBits GdipGetImageGraphicsContext GdipDeleteGraphics GdipGetImagePalette GdipSetCompositingMode GdipGetImageWidth GdipCreateBitmapFromFile

ws2_32

WSACleanup

Name

.text

Size

180KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

73KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7c10d571f05db22c7fbd0bd7a93b59f22d44a2b9934a6583071d7fb561475225

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

gdiplus

ws2_32

generic