63fa06cf3973cb1f366d0c70a6fd7363b5ef7779637d88ef829c7ef004343e7d

General

Target
63fa06cf3973cb1f366d0c70a6fd7363b5ef7779637d88ef829c7ef004343e7d
Size 158KB
Sample260930-v5e48sst7q
SHA256 63fa06cf3973cb1f366d0c70a6fd7363b5ef7779637d88ef829c7ef004343e7d
MD5 02a5aaf8be6dbf2d920a5c1406741d5c
SHA1 1bc1e6dfd546be5828b09971c8c240166b9cd3ad
SHA512 f6d3344d1c2dda835db50b806a665a73b779d6962a45889054837352c8410de0c88f716a1d46474655b8a4fcca3c69d2d3f0f3bd79284716a2fbf89619e7f981
SSDEEP 3072:zy2ijIc6TvUzpC1tHPcv01CYYsEWQ9x9bavqz4G/:zrE9FctHMqYBWQb99/
TLSH
T1DBF37C57B3E624F9E1738238C5914646EB72783607204AEF47A087796F237D19E3AB31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63fa06cf3973cb1f366d0c70a6fd7363b5ef7779637d88ef829c7ef004343e7d

File Explorer

63fa06cf3973cb1f366d0c70a6fd7363b5ef7779637d88ef829c7ef004343e7d

.exe 158KB

63fa06cf3973cb1f366d0c70a6fd7363b5ef7779637d88ef829c7ef004343e7d

IMPHASH 87c36d61d4bd06e4370c94284567e3af
SHA256 63fa06cf3973cb1f366d0c70a6fd7363b5ef7779637d88ef829c7ef004343e7d
MD5 02a5aaf8be6dbf2d920a5c1406741d5c
SHA1 1bc1e6dfd546be5828b09971c8c240166b9cd3ad
SHA512 f6d3344d1c2dda835db50b806a665a73b779d6962a45889054837352c8410de0c88f716a1d46474655b8a4fcca3c69d2d3f0f3bd79284716a2fbf89619e7f981
SSDEEP 3072:zy2ijIc6TvUzpC1tHPcv01CYYsEWQ9x9bavqz4G/:zrE9FctHMqYBWQb99/
TLSH
T1DBF37C57B3E624F9E1738238C5914646EB72783607204AEF47A087796F237D19E3AB31
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SleepConditionVariableCS EnterCriticalSection WakeAllConditionVariable LeaveCriticalSection InitializeCriticalSection InitializeConditionVariable Sleep QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CloseHandle CreateFileW

Name

.text

Size

101KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

63fa06cf3973cb1f366d0c70a6fd7363b5ef7779637d88ef829c7ef004343e7d

kernel32

generic