53b19a921eab4c847711d7a7d6779a8b015554e9a718b0e421e887c99648c1ff

General

Target
53b19a921eab4c847711d7a7d6779a8b015554e9a718b0e421e887c99648c1ff
Size 220KB
Sample260920-zd2alsdp8x
SHA256 53b19a921eab4c847711d7a7d6779a8b015554e9a718b0e421e887c99648c1ff
MD5 e8f71a4f08d96beb4042acd35c70b560
SHA1 665999c53e9b8cac7cc5f41e17176a7e26539f74
SHA512 1b94487846c04fbcf21c0af64e76d5c231cd0b83ae5e05cbb5ceea8e5326ded944e69b639e9e7744faa1d8d54abc49e33aec176e530f7e2c7d3878c692de4c02
SSDEEP 3072:RiKNzvRJ9YRduQrLrcManPpKb0Nrs++pDdX4SSfR9y6Ruis/xBjR:cKpvRJ9uduQmnPpKoNqtHm9yxf
TLSH
T1F1247C58B3E50DF9FC738239C9A38602E6727C111770DADF03A0066AAF6B7D1553AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53b19a921eab4c847711d7a7d6779a8b015554e9a718b0e421e887c99648c1ff

File Explorer

53b19a921eab4c847711d7a7d6779a8b015554e9a718b0e421e887c99648c1ff

.dll 220KB

53b19a921eab4c847711d7a7d6779a8b015554e9a718b0e421e887c99648c1ff

IMPHASH 8f0a07204e4a71f11a1387337dfc56f6
SHA256 53b19a921eab4c847711d7a7d6779a8b015554e9a718b0e421e887c99648c1ff
MD5 e8f71a4f08d96beb4042acd35c70b560
SHA1 665999c53e9b8cac7cc5f41e17176a7e26539f74
SHA512 1b94487846c04fbcf21c0af64e76d5c231cd0b83ae5e05cbb5ceea8e5326ded944e69b639e9e7744faa1d8d54abc49e33aec176e530f7e2c7d3878c692de4c02
SSDEEP 3072:RiKNzvRJ9YRduQrLrcManPpKb0Nrs++pDdX4SSfR9y6Ruis/xBjR:cKpvRJ9uduQmnPpKoNqtHm9yxf
TLSH
T1F1247C58B3E50DF9FC738239C9A38602E6727C111770DADF03A0066AAF6B7D1553AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

39600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetEnvironmentVariableA GetCurrentDirectoryA CreateDirectoryA CreateFileA DeleteFileA FlushFileBuffers GetFileAttributesA GetFileSize ReadFile SetFilePointer WriteFile CloseHandle GetLastError QueryPerformanceCounter QueryPerformanceFrequency HeapAlloc HeapFree GetProcessHeap InitializeCriticalSection EnterCriticalSection LeaveCriticalSection InitOnceExecuteOnce SetEvent ReleaseMutex WaitForSingleObject CreateMutexA CreateEventA Sleep GetCurrentProcess GetCurrentProcessId GetExitCodeProcess CreateThread CreateProcessA OpenProcess GetLocalTime GetTickCount GetTickCount64 GetVersionExA VirtualQuery DisableThreadLibraryCalls GetModuleFileNameA GetProcAddress LoadLibraryExW LoadLibraryA MoveFileA MultiByteToWideChar WideCharToMultiByte FreeConsole CreateToolhelp32Snapshot Process32First Process32Next GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx InterlockedFlushSList RtlPcToFileHeader RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetModuleFileNameW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW VirtualProtect LCMapStringW GetStringTypeW SetFilePointerEx SetStdHandle HeapSize HeapReAlloc GetConsoleOutputCP GetConsoleMode CreateFileW

vkCreateDebugReportCallbackEXT vkCreateDevice vkCreateImage vkCreateInstance vkCreateWin32SurfaceKHR vkDestroyDebugReportCallbackEXT vkDestroyDevice vkDestroyImage vkDestroyInstance vkDestroySurfaceKHR vkEnumerateDeviceExtensionProperties vkEnumerateInstanceExtensionProperties vkEnumerateInstanceLayerProperties vkEnumerateInstanceVersion vkEnumeratePhysicalDeviceGroups vkEnumeratePhysicalDeviceGroupsKHR vkEnumeratePhysicalDevices vkGetBufferMemoryRequirements vkGetDeviceGroupPresentCapabilitiesKHR vkGetDeviceProcAddr vkGetDeviceQueue vkGetImageMemoryRequirements vkGetImageSparseMemoryRequirements vkGetInstanceProcAddr vkGetPhysicalDeviceFeatures vkGetPhysicalDeviceFeatures2 vkGetPhysicalDeviceFeatures2KHR vkGetPhysicalDeviceFormatProperties vkGetPhysicalDeviceFormatProperties2 vkGetPhysicalDeviceFormatProperties2KHR vkGetPhysicalDeviceImageFormatProperties vkGetPhysicalDeviceMemoryProperties vkGetPhysicalDeviceMemoryProperties2 vkGetPhysicalDeviceMemoryProperties2KHR vkGetPhysicalDeviceProperties vkGetPhysicalDeviceProperties2 vkGetPhysicalDeviceProperties2KHR vkGetPhysicalDeviceQueueFamilyProperties vkGetPhysicalDeviceQueueFamilyProperties2 vkGetPhysicalDeviceQueueFamilyProperties2KHR vkGetPhysicalDeviceSurfaceCapabilities2EXT vkGetPhysicalDeviceSurfaceCapabilities2KHR vkGetPhysicalDeviceSurfaceCapabilitiesKHR vkGetPhysicalDeviceSurfaceFormats2KHR vkGetPhysicalDeviceSurfaceFormatsKHR vkGetPhysicalDeviceSurfacePresentModesKHR vkGetPhysicalDeviceSurfaceSupportKHR vkGetPhysicalDeviceToolPropertiesEXT vkGetPhysicalDeviceWin32PresentationSupportKHR

Name

.text

Size

147KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

984B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

53b19a921eab4c847711d7a7d6779a8b015554e9a718b0e421e887c99648c1ff

kernel32

generic