958b6fe1ff846d75be7938b3eb45f2aa4fb6c05354f6c9a184618c6ca4df6978

Sharing

Copy URL Twitter E-mail

General

Target
958b6fe1ff846d75be7938b3eb45f2aa4fb6c05354f6c9a184618c6ca4df6978
Size 107KB
Sample260916-td83kabe98
SHA256 958b6fe1ff846d75be7938b3eb45f2aa4fb6c05354f6c9a184618c6ca4df6978
MD5 2c2d51fca8345206efb3e55200138569
SHA1 6faf4d562c39d305173ab53d55cd2ed5427d4ed5
SHA512 09ac0b6ee7564de2efcf35b7255399001bc0fcdcd284daaf931d27f77d6a7fef27faf0bd9bc2687a75e6b3351280842e2af36b135d30f6b5fc852a62d94d98e0
SSDEEP 1536:45ZFDFT5MJ4RLAgIv90dtu3Y7IWjpzeopeoDWQvFJVSWWso8i:4RDFTtL/mGdtB9pe/BQrVS3s
TLSH
T105B31966B4C2437BC041BEB50F48C9E5B632EC202972D0F773D92A1F8A7AD953E5C54A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
958b6fe1ff846d75be7938b3eb45f2aa4fb6c05354f6c9a184618c6ca4df6978

File Explorer

958b6fe1ff846d75be7938b3eb45f2aa4fb6c05354f6c9a184618c6ca4df6978

.exe 107KB

958b6fe1ff846d75be7938b3eb45f2aa4fb6c05354f6c9a184618c6ca4df6978

IMPHASH 90543700d1ac00aca2ec3123bd1ea994
SHA256 958b6fe1ff846d75be7938b3eb45f2aa4fb6c05354f6c9a184618c6ca4df6978
MD5 2c2d51fca8345206efb3e55200138569
SHA1 6faf4d562c39d305173ab53d55cd2ed5427d4ed5
SHA512 09ac0b6ee7564de2efcf35b7255399001bc0fcdcd284daaf931d27f77d6a7fef27faf0bd9bc2687a75e6b3351280842e2af36b135d30f6b5fc852a62d94d98e0
SSDEEP 1536:45ZFDFT5MJ4RLAgIv90dtu3Y7IWjpzeopeoDWQvFJVSWWso8i:4RDFTtL/mGdtB9pe/BQrVS3s
TLSH
T105B31966B4C2437BC041BEB50F48C9E5B632EC202972D0F773D92A1F8A7AD953E5C54A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

64896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

IsWow64Process GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer CreateFileW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource CreateDirectoryA GetFileAttributesA DeleteFileA CopyFileA MoveFileA CreateProcessA FindFirstFileA TerminateProcess FindClose

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW

advapi32

RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegCloseKey

wininet

InternetOpenA InternetCloseHandle InternetOpenUrlA InternetReadFile

Name

.text

Size

59KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.code

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

958b6fe1ff846d75be7938b3eb45f2aa4fb6c05354f6c9a184618c6ca4df6978

kernel32

oleaut32

user32

advapi32

wininet

generic