53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185

Sharing

Copy URL Twitter E-mail

General

Target
53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185
Size 298KB
Sample260922-3kt2natgph
SHA256 53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185
MD5 dddc6daf8f47a8ae1ad5e9e5b296ed7f
SHA1 550e663dc4f46bc7d3e0eb00cf3f3618c46d642b
SHA512 22ff8d3412502ca3d06039f9a6fe8b404ea863e12a103dd6376d2619c057e5dcd16158e24dbb3e540108890bdab0e4181ac12c4872892338662681a86ab2cb09
SSDEEP 3072:W0L2F+czJ4gjdrlRP5CPoDJMNXEepfjWEPY4vZhuGnrTTTr3EgEJmm:hKFDFRdrT5CPoDSX1fjWETPUDJmm
TLSH
T198547066E932FA44C75B24392444985FC6A72E285DF14B3EC3508B2D4A4FFC05B5F2BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185

File Explorer

53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185

.exe 298KB

53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185

IMPHASH ed02c64cf6b5e3361684d1ce8cb7950e
SHA256 53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185
MD5 dddc6daf8f47a8ae1ad5e9e5b296ed7f
SHA1 550e663dc4f46bc7d3e0eb00cf3f3618c46d642b
SHA512 22ff8d3412502ca3d06039f9a6fe8b404ea863e12a103dd6376d2619c057e5dcd16158e24dbb3e540108890bdab0e4181ac12c4872892338662681a86ab2cb09
SSDEEP 3072:W0L2F+czJ4gjdrlRP5CPoDJMNXEepfjWEPY4vZhuGnrTTTr3EgEJmm:hKFDFRdrT5CPoDSX1fjWETPUDJmm
TLSH
T198547066E932FA44C75B24392444985FC6A72E285DF14B3EC3508B2D4A4FFC05B5F2BA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57940

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CreateFileA WriteFile CloseHandle GetLastError HeapCreate TryEnterCriticalSection DeleteCriticalSection CreateFiber SwitchToFiber GetCurrentThreadId GetWindowsDirectoryA GetFileType SetEndOfFile CreateFileMappingA SetFileTime OpenFileMappingA ExitProcess VirtualAlloc IsValidCodePage GetACP GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetOEMCP GetCPInfo SetStdHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent HeapFree GetModuleHandleW GetProcAddress HeapAlloc MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime FreeLibrary LoadLibraryExW LCMapStringW WideCharToMultiByte GetStringTypeW GetStdHandle GetModuleFileNameW GetStartupInfoW GetProcessHeap GetModuleHandleExW GetEnvironmentStringsW FreeEnvironmentStringsW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc SetFilePointerEx WriteConsoleW CreateFileW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead RtlUnwindEx RtlPcToFileHeader EncodePointer RaiseException FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW

Name

.text

Size

95KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

204B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rdata2

Size

105KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

53d753618e21cfabf61c6ffa3e589f47e52acf7596400419b4a12c1685a22185

kernel32

generic