b5cf0ace1da173fc1dc4f682a7819940355e675cb6cd6ee67e880278d9053752

Sharing

Copy URL Twitter E-mail

General

Target
b5cf0ace1da173fc1dc4f682a7819940355e675cb6cd6ee67e880278d9053752
Size 208KB
Sample260930-r4madattfx
SHA256 b5cf0ace1da173fc1dc4f682a7819940355e675cb6cd6ee67e880278d9053752
MD5 9758415c002d8d4fcbbef796ae9f96f5
SHA1 600b0bbae842d174c83ee8db571d8b67595eedd3
SHA512 901985abc7194758f1b5efe690ec848562dd83cdbb5259cf96ef4fcf6488f81e21f98ed578fe212fbe086e7d016680aee9d0e49964470cdeef53fc790839ed11
SSDEEP 3072:7SOQYPami+QlL6sNK8PEZSEvC3Zxk4qRuRHb:7SOA1PEZSEwMuRHb
TLSH
T1CA24C6B027A98965E131463D1AA643713739FFC00B5A9FCB690CF52A2D23EE43EB5705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5cf0ace1da173fc1dc4f682a7819940355e675cb6cd6ee67e880278d9053752

File Explorer

b5cf0ace1da173fc1dc4f682a7819940355e675cb6cd6ee67e880278d9053752

.dll 208KB

b5cf0ace1da173fc1dc4f682a7819940355e675cb6cd6ee67e880278d9053752

IMPHASH 2c4d4adc05cab669b6e6e84b121b8300
SHA256 b5cf0ace1da173fc1dc4f682a7819940355e675cb6cd6ee67e880278d9053752
MD5 9758415c002d8d4fcbbef796ae9f96f5
SHA1 600b0bbae842d174c83ee8db571d8b67595eedd3
SHA512 901985abc7194758f1b5efe690ec848562dd83cdbb5259cf96ef4fcf6488f81e21f98ed578fe212fbe086e7d016680aee9d0e49964470cdeef53fc790839ed11
SSDEEP 3072:7SOQYPami+QlL6sNK8PEZSEvC3Zxk4qRuRHb:7SOA1PEZSEwMuRHb
TLSH
T1CA24C6B027A98965E131463D1AA643713739FFC00B5A9FCB690CF52A2D23EE43EB5705
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegDeleteValueA RegEnumValueA RegOpenKeyExA RegSetValueExA

comctl32

InitCommonControlsEx

gdi32

CreateCompatibleDC CreateDIBSection CreateHalftonePalette DeleteDC DeleteObject RealizePalette SelectObject SelectPalette StretchBlt

kernel32

DisableThreadLibraryCalls FreeLibrary GetModuleHandleW GetPrivateProfileSectionA GetPrivateProfileStringW GetProcAddress GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapReAlloc IsBadStringPtrA IsBadStringPtrW LoadLibraryA MulDiv MultiByteToWideChar RaiseException WideCharToMultiByte lstrcmpW

ntdll

RtlCreateUnicodeStringFromAsciiz RtlFreeUnicodeString _vsnprintf

ucrtbase

__acrt_iob_func __stdio_common_vsprintf _strdup _strnicmp _wcsdup calloc free fwrite getenv isprint malloc memcmp memcpy memmove strchr strcmp strcspn strlen tolower wcschr wcslen

user32

AdjustWindowRect BeginPaint CreateWindowExW DefMDIChildProcW DefWindowProcW DestroyWindow DialogBoxParamW EnableWindow EndDialog EndPaint GetClientRect GetDlgItem GetWindow GetWindowLongPtrW GetWindowLongW InvalidateRect IsWindowUnicode KillTimer LoadCursorW LoadStringW MessageBoxW RegisterClassW SendDlgItemMessageW SendMessageW SetCursor SetFocus SetTimer SetWindowLongPtrW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow wsprintfA wsprintfW

winmm

CloseDriver OpenDriver SendDriverMessage mciGetErrorStringA mciGetErrorStringW mciSendCommandA mciSendCommandW mciSendStringA mciSendStringW mmioStringToFOURCCA

Name

.text

Size

56KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

/4864

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

36KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b5cf0ace1da173fc1dc4f682a7819940355e675cb6cd6ee67e880278d9053752

advapi32

comctl32

gdi32

kernel32

ntdll

ucrtbase

user32

winmm

generic