5ede0a77761c4636ba32e19e2ab7deca69251a10569524c8ae9a5d2e49e26347

Sharing

Copy URL Twitter E-mail

General

Target
5ede0a77761c4636ba32e19e2ab7deca69251a10569524c8ae9a5d2e49e26347
Size 138KB
Sample261001-yn1ldsbb34
SHA256 5ede0a77761c4636ba32e19e2ab7deca69251a10569524c8ae9a5d2e49e26347
MD5 0441708feea41d00b664289d9002c413
SHA1 9a09a9c27ac7bdd63bfa92b8dda14480698ba215
SHA512 020a1ad7fba19ddd329a2733b80cd3426e6b0401fdaba78d208be81c4f5f78d7982d1e42059f62f8362a8610ae99346227aa56f6ffb977afc2e77456d01f4b2b
SSDEEP 1536:l+l+0KvvFGgKur0GKYCgSMeb7QKx+mgg/AN1FJFW9zqeCx0KqXLGeiq2ZN0gfVgX:ol+0OtpJ0Noct+CoN5FBx1qXLd
TLSH
T140D38D137641A1FDD44AC03482558AA7B77270C61F325BFF02A5463C2FAA9F66F3C668
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ede0a77761c4636ba32e19e2ab7deca69251a10569524c8ae9a5d2e49e26347

File Explorer

5ede0a77761c4636ba32e19e2ab7deca69251a10569524c8ae9a5d2e49e26347

.exe 138KB

5ede0a77761c4636ba32e19e2ab7deca69251a10569524c8ae9a5d2e49e26347

IMPHASH e1e8a578b0a91b9b5b2279beddf8fed6
SHA256 5ede0a77761c4636ba32e19e2ab7deca69251a10569524c8ae9a5d2e49e26347
MD5 0441708feea41d00b664289d9002c413
SHA1 9a09a9c27ac7bdd63bfa92b8dda14480698ba215
SHA512 020a1ad7fba19ddd329a2733b80cd3426e6b0401fdaba78d208be81c4f5f78d7982d1e42059f62f8362a8610ae99346227aa56f6ffb977afc2e77456d01f4b2b
SSDEEP 1536:l+l+0KvvFGgKur0GKYCgSMeb7QKx+mgg/AN1FJFW9zqeCx0KqXLGeiq2ZN0gfVgX:ol+0OtpJ0Noct+CoN5FBx1qXLd
TLSH
T140D38D137641A1FDD44AC03482558AA7B77270C61F325BFF02A5463C2FAA9F66F3C668
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

93840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-ad2aa6b1840fd81d.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context memset _CxxThrowException __C_specific_handler __current_exception memcpy memmove __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

5ede0a77761c4636ba32e19e2ab7deca69251a10569524c8ae9a5d2e49e26347

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic