01057b53342491b845c2c28689c95d5f729ed0d1cb14bc56b214dd920d6bc590

Sharing

Copy URL Twitter E-mail

General

Target
01057b53342491b845c2c28689c95d5f729ed0d1cb14bc56b214dd920d6bc590
Size 125KB
Sample260925-s2bljafc53
SHA256 01057b53342491b845c2c28689c95d5f729ed0d1cb14bc56b214dd920d6bc590
MD5 fdaaf966a61afd12cfee820600d10b7e
SHA1 e104c81113e7784031161dc6cb9afeef81fb7042
SHA512 7b4474de6679c5bc53b01dfea4e7bba5edc6f9064720ec1c03f6a943d01f69d2a52d4e1dcc16ef45d46693963f21bfb55c34e6707e68332c2e8134c33bba0fcc
SSDEEP 1536:/Q0FrCHh/0+CHyNUZCjQUVtSmakkt/JA3S9zXJaV26rikeKLARez2N0Q4i4rZ0bZ:/Qmw0+tN7BVtSVtK38atVeKgoZ
TLSH
T135C36D137941A1FDD44AC034C226C966A772B0DA1F326BFF136506382FADDE66F38694
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01057b53342491b845c2c28689c95d5f729ed0d1cb14bc56b214dd920d6bc590

File Explorer

01057b53342491b845c2c28689c95d5f729ed0d1cb14bc56b214dd920d6bc590

.exe 125KB

01057b53342491b845c2c28689c95d5f729ed0d1cb14bc56b214dd920d6bc590

IMPHASH 912f3521a088918e0429a19cfb3980cc
SHA256 01057b53342491b845c2c28689c95d5f729ed0d1cb14bc56b214dd920d6bc590
MD5 fdaaf966a61afd12cfee820600d10b7e
SHA1 e104c81113e7784031161dc6cb9afeef81fb7042
SHA512 7b4474de6679c5bc53b01dfea4e7bba5edc6f9064720ec1c03f6a943d01f69d2a52d4e1dcc16ef45d46693963f21bfb55c34e6707e68332c2e8134c33bba0fcc
SSDEEP 1536:/Q0FrCHh/0+CHyNUZCjQUVtSmakkt/JA3S9zXJaV26rikeKLARez2N0Q4i4rZ0bZ:/Qmw0+tN7BVtSVtK38atVeKgoZ
TLSH
T135C36D137941A1FDD44AC034C226C966A772B0DA1F326BFF136506382FADDE66F38694
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

84912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-0e1fca6e04198194.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError WaitForSingleObject CloseHandle SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP FormatMessageW GetModuleHandleA

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memmove memset __current_exception __C_specific_handler __CxxFrameHandler3 __current_exception_context memcpy _CxxThrowException memcmp

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

01057b53342491b845c2c28689c95d5f729ed0d1cb14bc56b214dd920d6bc590

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic