8a345426a38f112601b99014fbdeaa96ae96e606070fce2b000f1d3d8d331f99

General

Target
8a345426a38f112601b99014fbdeaa96ae96e606070fce2b000f1d3d8d331f99
Size 96KB
Sample260917-3awshaeb85
SHA256 8a345426a38f112601b99014fbdeaa96ae96e606070fce2b000f1d3d8d331f99
MD5 116ce7840467ec151b74029a9d423964
SHA1 6df1b657f6187a59e0cfc81d1772f64f9b743020
SHA512 ccd00e49e02ce0f4e85df0f789649e330a8b4f75529b24ce56292648edef9ff96843c273714a487b27a011a5d03166e55dc7cb82fcb5516c5736f65e63e0e51c
SSDEEP 1536:SQjHJWeI/6cofIH3NT73Y7Ih2VQXIIvWso8i:SuHJWeI/mfW9wa6QYIes
TLSH
T16FA3192AB183433BC1027FB54B5449FAB762AD206832C0F773D92B1F897E9957F1851A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a345426a38f112601b99014fbdeaa96ae96e606070fce2b000f1d3d8d331f99

File Explorer

8a345426a38f112601b99014fbdeaa96ae96e606070fce2b000f1d3d8d331f99

.exe 96KB

8a345426a38f112601b99014fbdeaa96ae96e606070fce2b000f1d3d8d331f99

IMPHASH a12d186f65c99f872323a61923ce70d8
SHA256 8a345426a38f112601b99014fbdeaa96ae96e606070fce2b000f1d3d8d331f99
MD5 116ce7840467ec151b74029a9d423964
SHA1 6df1b657f6187a59e0cfc81d1772f64f9b743020
SHA512 ccd00e49e02ce0f4e85df0f789649e330a8b4f75529b24ce56292648edef9ff96843c273714a487b27a011a5d03166e55dc7cb82fcb5516c5736f65e63e0e51c
SSDEEP 1536:SQjHJWeI/6cofIH3NT73Y7Ih2VQXIIvWso8i:SuHJWeI/mfW9wa6QYIes
TLSH
T16FA3192AB183433BC1027FB54B5449FAB762AD206832C0F773D92B1F897E9957F1851A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

55120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer CreateFileW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource DeleteFileA CopyFileA MoveFileA CreateProcessA FindFirstFileA TerminateProcess FindClose

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW

Name

.text

Size

50KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.code

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

8a345426a38f112601b99014fbdeaa96ae96e606070fce2b000f1d3d8d331f99

kernel32

oleaut32

user32

generic