934a43a8344cf833b9a866aa4ccce588404be957c5e3c31a5b169eeddcdd0ebe

Sharing

Copy URL Twitter E-mail

General

Target
934a43a8344cf833b9a866aa4ccce588404be957c5e3c31a5b169eeddcdd0ebe
Size 30KB
Sample260919-tkvthsha69
SHA256 934a43a8344cf833b9a866aa4ccce588404be957c5e3c31a5b169eeddcdd0ebe
MD5 d061ae37060813d17a7094273c5d8fa8
SHA1 950f7d30a20b3faece97c51814d995667a78924b
SHA512 5b3a670bad214727d2173bc5c5ed94411009618e7bdf91a5ff440757106672b2e4f68dd3b53b1003a420d1650c4532bcd57f7b388e871c19d92269003cb1a33f
SSDEEP 384:sh05aOzzm+8Xl0Bbu3UJ6/0Xc01u9tVhxmkPq1qIZE6aAHLANhPfmCW:shEiHu8UJ6/0sD9RxKfb+B1W
TLSH
T1A7E2081AF66344F9C699E2B096EF0732E671BC331A71A32D2344D3346E90ED1CA2DB05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
934a43a8344cf833b9a866aa4ccce588404be957c5e3c31a5b169eeddcdd0ebe

File Explorer

934a43a8344cf833b9a866aa4ccce588404be957c5e3c31a5b169eeddcdd0ebe

.exe 30KB

934a43a8344cf833b9a866aa4ccce588404be957c5e3c31a5b169eeddcdd0ebe

IMPHASH 77bc82d75d423856cbe4540891070a77
SHA256 934a43a8344cf833b9a866aa4ccce588404be957c5e3c31a5b169eeddcdd0ebe
MD5 d061ae37060813d17a7094273c5d8fa8
SHA1 950f7d30a20b3faece97c51814d995667a78924b
SHA512 5b3a670bad214727d2173bc5c5ed94411009618e7bdf91a5ff440757106672b2e4f68dd3b53b1003a420d1650c4532bcd57f7b388e871c19d92269003cb1a33f
SSDEEP 384:sh05aOzzm+8Xl0Bbu3UJ6/0Xc01u9tVhxmkPq1qIZE6aAHLANhPfmCW:shEiHu8UJ6/0sD9RxKfb+B1W
TLSH
T1A7E2081AF66344F9C699E2B096EF0732E671BC331A71A32D2344D3346E90ED1CA2DB05
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNKSt5ctypeIcE13_M_widen_initEv _ZNSi4readEPcx _ZNSi5seekgExSt12_Ios_Seekdir _ZNSi5tellgEv _ZNSo3putEc _ZNSo5flushEv _ZNSo5writeEPKcx _ZNSo9_M_insertIyEERSoT_ _ZNSolsEPSt15basic_streambufIcSt11char_traitsIcEE _ZNSolsEi _ZNSt12__basic_fileIcED1Ev _ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode _ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv _ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev _ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev _ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev _ZNSt14basic_ofstreamIcSt11char_traitsIcEED1Ev _ZNSt6localeD1Ev _ZNSt8ios_base4InitC1Ev _ZNSt8ios_base4InitD1Ev _ZNSt8ios_baseC2Ev _ZNSt8ios_baseD2Ev _ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E _ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate _ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_x _ZSt16__throw_bad_castv _ZSt17__throw_bad_allocv _ZSt19__throw_logic_errorPKc _ZSt20__throw_length_errorPKc _ZSt4cerr _ZSt4cout _ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc _ZTTSt14basic_ifstreamIcSt11char_traitsIcEE _ZTTSt14basic_ofstreamIcSt11char_traitsIcEE _ZTVSt13basic_filebufIcSt11char_traitsIcEE _ZTVSt14basic_ifstreamIcSt11char_traitsIcEE _ZTVSt14basic_ofstreamIcSt11char_traitsIcEE _ZTVSt15basic_streambufIcSt11char_traitsIcEE _ZTVSt9basic_iosIcSt11char_traitsIcEE _ZdlPvy _Znwy __cxa_begin_catch __cxa_end_catch __cxa_rethrow __gxx_personality_seh0

kernel32

DeleteCriticalSection EnterCriticalSection GetFileAttributesA GetLastError GetModuleFileNameA GetStartupInfoA InitializeCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery

msvcrt

__C_specific_handler __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _commode _fmode _initterm _onexit abort calloc exit fprintf free fwrite malloc memchr memcpy memmove memset signal strlen strncmp vfprintf

Name

.text

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

720B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

168B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

934a43a8344cf833b9a866aa4ccce588404be957c5e3c31a5b169eeddcdd0ebe

libgcc_s_seh-1

libstdc++-6

kernel32

msvcrt

generic