ad19eaa91ad8ebb34dfd12414a9c27ca46103fa3cbb9298b591338cd34f2ef82

General

Target
ad19eaa91ad8ebb34dfd12414a9c27ca46103fa3cbb9298b591338cd34f2ef82
Size 903KB
Sample260916-x94phaer8t
SHA256 ad19eaa91ad8ebb34dfd12414a9c27ca46103fa3cbb9298b591338cd34f2ef82
MD5 116617afbb1080babfb534b7e683c783
SHA1 950def97b46285e5fadbef58582d15daa8db3ffe
SHA512 8e28c08edfde8bd9ec33b3287b566ec54c2d2567c68b113672a6085761fc39fca526b459a404bcdc60b2716b37332aa1f8bd93a95a4aaa9c1ec893995b83ffb0
SSDEEP 12288:9prCPxNVewqXv1A+F6+Yy7DXsr9azDsZZjgmedNizmdyLfsZyR34n2PY4qx/nwnA:yVq7dyLkZyh4n2PY0di
TLSH
T1F5157B6ABB9842A5E177D138C9825A0AFAF13456133197CF13E447AA3F237B45A3F311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad19eaa91ad8ebb34dfd12414a9c27ca46103fa3cbb9298b591338cd34f2ef82

File Explorer

ad19eaa91ad8ebb34dfd12414a9c27ca46103fa3cbb9298b591338cd34f2ef82

.dll 903KB

ad19eaa91ad8ebb34dfd12414a9c27ca46103fa3cbb9298b591338cd34f2ef82

IMPHASH b2107a64461888c4dd85228b72e46b67
SHA256 ad19eaa91ad8ebb34dfd12414a9c27ca46103fa3cbb9298b591338cd34f2ef82
MD5 116617afbb1080babfb534b7e683c783
SHA1 950def97b46285e5fadbef58582d15daa8db3ffe
SHA512 8e28c08edfde8bd9ec33b3287b566ec54c2d2567c68b113672a6085761fc39fca526b459a404bcdc60b2716b37332aa1f8bd93a95a4aaa9c1ec893995b83ffb0
SSDEEP 12288:9prCPxNVewqXv1A+F6+Yy7DXsr9azDsZZjgmedNizmdyLfsZyR34n2PY4qx/nwnA:yVq7dyLkZyh4n2PY0di
TLSH
T1F5157B6ABB9842A5E177D138C9825A0AFAF13456133197CF13E447AA3F237B45A3F311
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

272600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetSystemDirectoryW lstrcatW LoadLibraryW FreeLibrary GetProcAddress DisableThreadLibraryCalls GetModuleFileNameW MultiByteToWideChar SetEndOfFile WriteConsoleW HeapSize FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree GetLocaleInfoEx EncodePointer DecodePointer WideCharToMultiByte LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RtlUnwind GetFileAttributesExW ExitProcess GetModuleHandleExW HeapFree GetCurrentThread GetStdHandle GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode HeapAlloc ReadFile ReadConsoleW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle HeapReAlloc SetConsoleCtrlHandler GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle CreateFileW OutputDebugStringW

user32

MessageBoxW

Name

.text

Size

688KB

Virtual Size

688KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

137KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

348B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ad19eaa91ad8ebb34dfd12414a9c27ca46103fa3cbb9298b591338cd34f2ef82

kernel32

user32

generic