e97a59550ddddbc9e787695cb64a373bdbda95d6ea933c63a1d5f2b8309a98a7

General

Target
e97a59550ddddbc9e787695cb64a373bdbda95d6ea933c63a1d5f2b8309a98a7
Size 241KB
Sample260930-lpjcaat12k
SHA256 e97a59550ddddbc9e787695cb64a373bdbda95d6ea933c63a1d5f2b8309a98a7
MD5 b7766243f9c074f8b2e4e2affb9ef898
SHA1 8e196c696627793e234c08d014de62a9a7679084
SHA512 a1392bceab7e26442485fb4a8a733086c74fd264d28ad7db6796ac30f5f89ccf355d9f5d8affcc3b48e2feebdc8a5c1a7dca51a6fa3c7d0feebbdd2823158f43
SSDEEP 3072:cXgSsGXFsdeOWWljvGiGR5fxqD+7XPfwG1Qb1xh6ji1SAg0Fuj5LBqZzLAyHg2QW:Gg9AQeOWWlunRrPfohSAOdlqzLAyHx
TLSH
T1C3349E117881C432D4BE193455799B62597CB8210BA0CAEFA7F84E3D4F742C1A736BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e97a59550ddddbc9e787695cb64a373bdbda95d6ea933c63a1d5f2b8309a98a7

File Explorer

e97a59550ddddbc9e787695cb64a373bdbda95d6ea933c63a1d5f2b8309a98a7

.dll 241KB

e97a59550ddddbc9e787695cb64a373bdbda95d6ea933c63a1d5f2b8309a98a7

IMPHASH f8401c3f5bfc4724ab7b7d8ee90c834e
SHA256 e97a59550ddddbc9e787695cb64a373bdbda95d6ea933c63a1d5f2b8309a98a7
MD5 b7766243f9c074f8b2e4e2affb9ef898
SHA1 8e196c696627793e234c08d014de62a9a7679084
SHA512 a1392bceab7e26442485fb4a8a733086c74fd264d28ad7db6796ac30f5f89ccf355d9f5d8affcc3b48e2feebdc8a5c1a7dca51a6fa3c7d0feebbdd2823158f43
SSDEEP 3072:cXgSsGXFsdeOWWljvGiGR5fxqD+7XPfwG1Qb1xh6ji1SAg0Fuj5LBqZzLAyHg2QW:Gg9AQeOWWlunRrPfohSAOdlqzLAyHx
TLSH
T1C3349E117881C432D4BE193455799B62597CB8210BA0CAEFA7F84E3D4F742C1A736BBB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

32773

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\slave\workspace\DeltaSkip\Release\Log.pdb

kernel32

OutputDebugStringW GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetLocalTime GetCurrentThreadId GetCurrentProcessId GetPrivateProfileIntW DeleteFileW FindFirstFileW FindNextFileW FindClose GetSystemTimeAsFileTime MultiByteToWideChar WideCharToMultiByte GetStringTypeW EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetProcAddress GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent CloseHandle SetEvent ResetEvent WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary LoadLibraryExW InterlockedFlushSList CreateDirectoryW GetStdHandle GetFileType GetModuleFileNameA GetModuleHandleExW WriteConsoleW HeapAlloc HeapReAlloc HeapFree ExitProcess GetACP IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode GetTimeZoneInformation CreateThread GetProcessHeap FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle CreateFileW SetFilePointerEx HeapSize SetEndOfFile ReadFile ReadConsoleW

Name

.text

Size

149KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e97a59550ddddbc9e787695cb64a373bdbda95d6ea933c63a1d5f2b8309a98a7

kernel32

generic