e8aca1a0a6712eaa8b366d862bc2c62a7cf230710d722d13c11946b24db7dfee

General

Target
e8aca1a0a6712eaa8b366d862bc2c62a7cf230710d722d13c11946b24db7dfee
Size 261KB
Sample260930-e662cas18r
SHA256 e8aca1a0a6712eaa8b366d862bc2c62a7cf230710d722d13c11946b24db7dfee
MD5 767d014497ad3e5fcbc976d80f2dab8e
SHA1 71d23298610b223b73e6b5778de38508a94e733e
SHA512 dfb298fed3ad2f42dd88a1f5883aba122ed537c426b2f6629d2f10a64b7a918af2acd9752b8c010268e03591011de1d2494651dd0815c6bb79645c58b17cfa58
SSDEEP 3072:nBJST8yD9+RyWJ9IGVu+Y0RxbrLPS0ngg2/:uT8A9sJ9ffNLa8R2/
TLSH
T15F449016A65470E9D16555F784C2370C9B22EC6476D06ECA3ECE3AB60E357D0EEEBE00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8aca1a0a6712eaa8b366d862bc2c62a7cf230710d722d13c11946b24db7dfee

File Explorer

e8aca1a0a6712eaa8b366d862bc2c62a7cf230710d722d13c11946b24db7dfee

.exe 261KB

e8aca1a0a6712eaa8b366d862bc2c62a7cf230710d722d13c11946b24db7dfee

IMPHASH 36bc08ec8152cbbe908a21096f574e56
SHA256 e8aca1a0a6712eaa8b366d862bc2c62a7cf230710d722d13c11946b24db7dfee
MD5 767d014497ad3e5fcbc976d80f2dab8e
SHA1 71d23298610b223b73e6b5778de38508a94e733e
SHA512 dfb298fed3ad2f42dd88a1f5883aba122ed537c426b2f6629d2f10a64b7a918af2acd9752b8c010268e03591011de1d2494651dd0815c6bb79645c58b17cfa58
SSDEEP 3072:nBJST8yD9+RyWJ9IGVu+Y0RxbrLPS0ngg2/:uT8A9sJ9ffNLa8R2/
TLSH
T15F449016A65470E9D16555F784C2370C9B22EC6476D06ECA3ECE3AB60E357D0EEEBE00
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11700

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetLastError CreateProcessW GetModuleFileNameW GetModuleHandleW FormatMessageW WriteConsoleW CreateFileW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx

user32

MessageBoxW SetProcessDPIAware

Name

.text

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

135KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e8aca1a0a6712eaa8b366d862bc2c62a7cf230710d722d13c11946b24db7dfee

kernel32

user32

generic