691a4ef8de97def45137f16abc63275d1688aa76ff9be9dd1d9e66d318a3abd1

Sharing

Copy URL Twitter E-mail

General

Target
691a4ef8de97def45137f16abc63275d1688aa76ff9be9dd1d9e66d318a3abd1
Size 132KB
Sample261001-rxelysec39
SHA256 691a4ef8de97def45137f16abc63275d1688aa76ff9be9dd1d9e66d318a3abd1
MD5 64d183ec0dfe8881cc704f56f1ec331b
SHA1 b8c52b7148baf98b5e1bf90b2ffa3189d9c096b8
SHA512 de9a8d8dbb8c4681c18f8323546e8b3a14cbeabe94626ef2fcd1172a111cb50eff546b119f9b58c448be42fa17c84ab571686c08d4738e49847444d193b8db1f
SSDEEP 3072:SpeROmVCJGU9i6z3C1/+VtBqjdLrguhPJbr6zbIR:HV+GU9/5uh7
TLSH
T15ED3D619F7669463E836963408AFF77AA119BD3143358D5AFF00CBAC3173AE0E525392
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
691a4ef8de97def45137f16abc63275d1688aa76ff9be9dd1d9e66d318a3abd1

File Explorer

691a4ef8de97def45137f16abc63275d1688aa76ff9be9dd1d9e66d318a3abd1

.dll 132KB

691a4ef8de97def45137f16abc63275d1688aa76ff9be9dd1d9e66d318a3abd1

IMPHASH 82d0f8fffa90ea980a15cc0d0b8c5476
SHA256 691a4ef8de97def45137f16abc63275d1688aa76ff9be9dd1d9e66d318a3abd1
MD5 64d183ec0dfe8881cc704f56f1ec331b
SHA1 b8c52b7148baf98b5e1bf90b2ffa3189d9c096b8
SHA512 de9a8d8dbb8c4681c18f8323546e8b3a14cbeabe94626ef2fcd1172a111cb50eff546b119f9b58c448be42fa17c84ab571686c08d4738e49847444d193b8db1f
SSDEEP 3072:SpeROmVCJGU9i6z3C1/+VtBqjdLrguhPJbr6zbIR:HV+GU9/5uh7
TLSH
T15ED3D619F7669463E836963408AFF77AA119BD3143358D5AFF00CBAC3173AE0E525392
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

MultinetGetConnectionPerformanceA MultinetGetConnectionPerformanceW MultinetGetErrorTextA MultinetGetErrorTextW NPSAuthenticationDialogA NPSCopyStringA NPSDeviceGetNumberA NPSDeviceGetStringA NPSGetProviderHandleA NPSGetProviderNameA NPSGetSectionNameA NPSNotifyGetContextA NPSNotifyRegisterA NPSSetCustomTextA NPSSetExtendedErrorA PwdChangePasswordA PwdChangePasswordW PwdGetPasswordStatusA PwdGetPasswordStatusW PwdSetPasswordStatusA PwdSetPasswordStatusW WNetAddConnection2A WNetAddConnection2W WNetAddConnection3A WNetAddConnection3W WNetAddConnectionA WNetAddConnectionW WNetCachePassword WNetCancelConnection2A WNetCancelConnection2W WNetCancelConnectionA WNetCancelConnectionW WNetClearConnections WNetCloseEnum WNetConnectionDialog WNetConnectionDialog1A WNetConnectionDialog1W WNetDisconnectDialog WNetDisconnectDialog1A WNetDisconnectDialog1W WNetEnumCachedPasswords WNetEnumResourceA WNetEnumResourceW WNetFMXEditPerm WNetFMXGetPermCaps WNetFMXGetPermHelp WNetFormatNetworkNameA WNetFormatNetworkNameW WNetGetCachedPassword WNetGetConnectionA WNetGetConnectionW WNetGetDirectoryTypeA WNetGetHomeDirectoryA WNetGetHomeDirectoryW WNetGetLastErrorA WNetGetLastErrorW WNetGetNetworkInformationA WNetGetNetworkInformationW WNetGetPropertyTextA WNetGetProviderNameA WNetGetProviderNameW WNetGetResourceInformationA WNetGetResourceInformationW WNetGetResourceParentA WNetGetResourceParentW WNetGetUniversalNameA WNetGetUniversalNameW WNetGetUserA WNetGetUserW WNetLogoffA WNetLogoffW WNetLogonA WNetLogonNotify WNetLogonW WNetOpenEnumA WNetOpenEnumW WNetPasswordChangeNotify WNetPropertyDialogA WNetRemoveCachedPassword WNetRestoreConnection WNetRestoreConnectionA WNetRestoreConnectionW WNetSetConnectionA WNetSetConnectionW WNetUseConnectionA WNetUseConnectionW WNetVerifyPasswordA WNetVerifyPasswordW

Name

.text

Size

52KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

691a4ef8de97def45137f16abc63275d1688aa76ff9be9dd1d9e66d318a3abd1

advapi32

kernel32

ntdll

ucrtbase

user32

generic