12390bfdb2677fb3ba61e653e2b06b5dfc96a455e73d101cbf701ee0bb2c55be

Sharing

Copy URL Twitter E-mail

General

Target
12390bfdb2677fb3ba61e653e2b06b5dfc96a455e73d101cbf701ee0bb2c55be
Size 129KB
Sample260924-v7kshaxy5m
SHA256 12390bfdb2677fb3ba61e653e2b06b5dfc96a455e73d101cbf701ee0bb2c55be
MD5 2bad90af1d2884f3a8920bbe2d0c1448
SHA1 8707bd9f974bdf3ec47fa82a20878b61c71ddae2
SHA512 b8bfd15f119d6442ed9af08f91309d1bdb2c29e659a18100573434600a318361586c25d2ec9e441022a42b14787917ab50fcbedb79cfe276f060a988d1db6501
SSDEEP 1536:QUF2MEz0jvXtE7QQKQmRMbL+fqD5h9uQgob1qQQa2q60KpO10iX:QUol0zUeQnH+Y55bDJ10iX
TLSH
T16CD37D137651A1ECD41AC034826589A6F322B0D91F325BFF17A5063C2FAE9F66F3C664
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12390bfdb2677fb3ba61e653e2b06b5dfc96a455e73d101cbf701ee0bb2c55be

File Explorer

12390bfdb2677fb3ba61e653e2b06b5dfc96a455e73d101cbf701ee0bb2c55be

.exe 129KB

12390bfdb2677fb3ba61e653e2b06b5dfc96a455e73d101cbf701ee0bb2c55be

IMPHASH dc9bdcb982a1af0424acf786bc00bfb9
SHA256 12390bfdb2677fb3ba61e653e2b06b5dfc96a455e73d101cbf701ee0bb2c55be
MD5 2bad90af1d2884f3a8920bbe2d0c1448
SHA1 8707bd9f974bdf3ec47fa82a20878b61c71ddae2
SHA512 b8bfd15f119d6442ed9af08f91309d1bdb2c29e659a18100573434600a318361586c25d2ec9e441022a42b14787917ab50fcbedb79cfe276f060a988d1db6501
SSDEEP 1536:QUF2MEz0jvXtE7QQKQmRMbL+fqD5h9uQgob1qQQa2q60KpO10iX:QUol0zUeQnH+Y55bDJ10iX
TLSH
T16CD37D137651A1ECD41AC034826589A6F322B0D91F325BFF17A5063C2FAE9F66F3C664
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-69b7d357fd850e2b.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp memcpy __current_exception __C_specific_handler __CxxFrameHandler3 __current_exception_context memmove _CxxThrowException memset

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

12390bfdb2677fb3ba61e653e2b06b5dfc96a455e73d101cbf701ee0bb2c55be

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic