91a33073a2c0722bd404e04d560b31e850d15acaae6f8e0121e013d18fb5ef48

Sharing

Copy URL Twitter E-mail

General

Target
91a33073a2c0722bd404e04d560b31e850d15acaae6f8e0121e013d18fb5ef48
Size 70KB
Sample260916-srdcdawx9r
SHA256 91a33073a2c0722bd404e04d560b31e850d15acaae6f8e0121e013d18fb5ef48
MD5 5fab5a4359c9a1c26d0436e56c4b15c4
SHA1 26470df83a253c380e71fdf07b8e4677789a5505
SHA512 c7e69b4e003051a7fe97c336325bce4255a34c5ff4f54839889314059e7403dc99d5273b123f84c374d43a6db7686207c62f17f7775f95e87ee8597c0fe648f5
SSDEEP 1536:TtkgkOYO4mUSNGXWhI6M5pSuFGp8npmi0WBEgXIOHK4WR2xSO:5rkVmxvhI6M5Aag8pmi0IEgXhHK4WR2T
TLSH
T1F6635A5AA69400BCD073C1B8CAA72D47C735B84413755BEF03D1E87A1F2B9E16E3AB52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91a33073a2c0722bd404e04d560b31e850d15acaae6f8e0121e013d18fb5ef48

File Explorer

91a33073a2c0722bd404e04d560b31e850d15acaae6f8e0121e013d18fb5ef48

.exe 70KB

91a33073a2c0722bd404e04d560b31e850d15acaae6f8e0121e013d18fb5ef48

IMPHASH d23446407723dd79e706764a0369989d
SHA256 91a33073a2c0722bd404e04d560b31e850d15acaae6f8e0121e013d18fb5ef48
MD5 5fab5a4359c9a1c26d0436e56c4b15c4
SHA1 26470df83a253c380e71fdf07b8e4677789a5505
SHA512 c7e69b4e003051a7fe97c336325bce4255a34c5ff4f54839889314059e7403dc99d5273b123f84c374d43a6db7686207c62f17f7775f95e87ee8597c0fe648f5
SSDEEP 1536:TtkgkOYO4mUSNGXWhI6M5pSuFGp8npmi0WBEgXIOHK4WR2xSO:5rkVmxvhI6M5Aag8pmi0IEgXhHK4WR2T
TLSH
T1F6635A5AA69400BCD073C1B8CAA72D47C735B84413755BEF03D1E87A1F2B9E16E3AB52
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55228

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

ShowWindow CloseDesktop OpenClipboard CloseClipboard ExitWindowsEx MessageBoxA GetForegroundWindow GetClipboardData SetCursorPos GetWindowTextW GetSystemMetrics

ole32

CoUninitialize CoInitialize

advapi32

RegOpenKeyExA RegCloseKey

msvcp140

_Thrd_detach _Query_perf_counter _Cnd_do_broadcast_at_thread_exit _Mtx_unlock ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Throw_Cpp_error@std@@YAXH@Z _Query_perf_frequency _Mtx_lock

kernel32

GetCurrentThreadId GetComputerNameA GlobalUnlock GetModuleHandleW GetStartupInfoW SetUnhandledExceptionFilter GetCurrentProcessId QueryPerformanceCounter GetSystemTimeAsFileTime CreateProcessA GetConsoleWindow WideCharToMultiByte FreeLibrary GetComputerNameW ExitProcess GlobalLock GetProcAddress ReadFile GetModuleFileNameA SetHandleInformation GetCurrentProcess ExpandEnvironmentStringsW CreatePipe WaitForSingleObject Sleep QueryPerformanceFrequency DeleteFileW CloseHandle LoadLibraryW InitializeSListHead

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memcpy memcmp _CxxThrowException __std_exception_destroy __std_exception_copy strstr __C_specific_handler __current_exception __current_exception_context memset

api-ms-win-crt-string-l1-1-0

strncpy_s strlen wcslen _stricmp

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _configure_narrow_argv _set_app_type _initterm _seh_filter_exe _exit _crt_atexit _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _beginthreadex exit _get_narrow_winmain_command_line _initialize_onexit_table _register_onexit_function _initterm_e

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf __stdio_common_vsprintf_s _set_fmode __p__commode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode malloc free

Sharing

General

Malware Config

Signatures

File Explorer

91a33073a2c0722bd404e04d560b31e850d15acaae6f8e0121e013d18fb5ef48

user32

ole32

advapi32

msvcp140

kernel32

vcruntime140_1

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic