69b6dbdb0d6408330f677dd44b36abfa6343d089a506b96b82d67082f7d7bfaa

Sharing

Copy URL Twitter E-mail

General

Target
69b6dbdb0d6408330f677dd44b36abfa6343d089a506b96b82d67082f7d7bfaa
Size 157KB
Sample260928-prrm8atz8m
SHA256 69b6dbdb0d6408330f677dd44b36abfa6343d089a506b96b82d67082f7d7bfaa
MD5 ca624383273a166fa874bc2a51cd1907
SHA1 f324932c365c26d563b01f8c48994f5f118ae481
SHA512 1cd95a16d986738b4ad55d49a42ca2725a4dee5284e5e509afdc940215dff6e626fa5784cc2745cb7a9b0b6a26f4ca467f528a117314b875a2fbc1cf389c061d
SSDEEP 3072:gvxeeZ9tSn4qyvF7/ixshFhqAWaN72yxrxadRJyayK:gc4qK1xyO72yxrxadRJyayK
TLSH
T1C5F31882BAC5ECFBC901463895FB83256338FAC54B9597034878A2351F536F06E8FB56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69b6dbdb0d6408330f677dd44b36abfa6343d089a506b96b82d67082f7d7bfaa

File Explorer

69b6dbdb0d6408330f677dd44b36abfa6343d089a506b96b82d67082f7d7bfaa

.exe 157KB

69b6dbdb0d6408330f677dd44b36abfa6343d089a506b96b82d67082f7d7bfaa

IMPHASH 7822c9b50c88a3179f122387431d39f3
SHA256 69b6dbdb0d6408330f677dd44b36abfa6343d089a506b96b82d67082f7d7bfaa
MD5 ca624383273a166fa874bc2a51cd1907
SHA1 f324932c365c26d563b01f8c48994f5f118ae481
SHA512 1cd95a16d986738b4ad55d49a42ca2725a4dee5284e5e509afdc940215dff6e626fa5784cc2745cb7a9b0b6a26f4ca467f528a117314b875a2fbc1cf389c061d
SSDEEP 3072:gvxeeZ9tSn4qyvF7/ixshFhqAWaN72yxrxadRJyayK:gc4qK1xyO72yxrxadRJyayK
TLSH
T1C5F31882BAC5ECFBC901463895FB83256338FAC54B9597034878A2351F536F06E8FB56
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection FreeLibrary GetLastError GetModuleHandleW GetProcAddress InitializeCriticalSection LeaveCriticalSection LoadLibraryW SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fmode _initterm abort atexit calloc exit fprintf free malloc memcpy memmove memset signal strlen strncmp vfprintf

user32

AdjustWindowRect CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW LoadCursorW PeekMessageW PostQuitMessage RegisterClassW ShowWindow TranslateMessage

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNSo9_M_insertImEERSoT_ _ZNSolsEi _ZNSt11this_thread11__sleep_forENSt6chrono8durationIxSt5ratioILx1ELx1EEEENS1_IxS2_ILx1ELx1000000000EEEE _ZNSt13runtime_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE _ZNSt13runtime_errorD1Ev _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE15_M_replace_coldEPcyPKcyy _ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_x _ZSt17__throw_bad_allocv _ZSt19__throw_logic_errorPKc _ZSt20__throw_length_errorPKc _ZSt21ios_base_library_initv _ZSt4cerr _ZSt4cout _ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc _ZTVN10__cxxabiv117__class_type_infoE _ZTVN10__cxxabiv120__si_class_type_infoE _ZdlPvy _Znwy __cxa_allocate_exception __cxa_begin_catch __cxa_end_catch __cxa_free_exception __cxa_throw __gxx_personality_seh0

Name

.text

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

744B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

707B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

512B

Virtual Size

396B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

69b6dbdb0d6408330f677dd44b36abfa6343d089a506b96b82d67082f7d7bfaa

kernel32

msvcrt

user32

libgcc_s_seh-1

libstdc++-6

generic