58d266333af5b53aa99e17e664cba83c28baeb16af7632f0c5c1cfe9536ad735

Sharing

Copy URL Twitter E-mail

General

Target
58d266333af5b53aa99e17e664cba83c28baeb16af7632f0c5c1cfe9536ad735
Size 115KB
Sample261006-prskhsbt2n
SHA256 58d266333af5b53aa99e17e664cba83c28baeb16af7632f0c5c1cfe9536ad735
MD5 7970a6e4ff0d6cf36c2b9edc9307a6de
SHA1 622e9a062dff46f7009d2383b812584857c00c38
SHA512 262ea9145b37e9cf5ff6ce2d0a8b1cc323c48fe4d4561c83485b096f8e6a94e07d38c4f8699aa7ddde53670b5dc6b1afbe0279654ca8375fdcc585c55e139481
SSDEEP 768:IbUoO7hFOJOKGuNiacq6aSoc5ntbbhyIuIf62Dq5a3puK6krEKO/00GmykmmX/Od:SufQzz6qcbhuG61a31VrEKspAGe0U
TLSH
T164C3D851F35468A2C8B6A33D04DFE2B9772CFB920163CB57E744E7512E53AD03E96282
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58d266333af5b53aa99e17e664cba83c28baeb16af7632f0c5c1cfe9536ad735

File Explorer

58d266333af5b53aa99e17e664cba83c28baeb16af7632f0c5c1cfe9536ad735

.dll 115KB

58d266333af5b53aa99e17e664cba83c28baeb16af7632f0c5c1cfe9536ad735

IMPHASH 8d10a810457744d932915d9a0777171f
SHA256 58d266333af5b53aa99e17e664cba83c28baeb16af7632f0c5c1cfe9536ad735
MD5 7970a6e4ff0d6cf36c2b9edc9307a6de
SHA1 622e9a062dff46f7009d2383b812584857c00c38
SHA512 262ea9145b37e9cf5ff6ce2d0a8b1cc323c48fe4d4561c83485b096f8e6a94e07d38c4f8699aa7ddde53670b5dc6b1afbe0279654ca8375fdcc585c55e139481
SSDEEP 768:IbUoO7hFOJOKGuNiacq6aSoc5ntbbhyIuIf62Dq5a3puK6krEKO/00GmykmmX/Od:SufQzz6qcbhuG61a31VrEKspAGe0U
TLSH
T164C3D851F35468A2C8B6A33D04DFE2B9772CFB920163CB57E744E7512E53AD03E96282
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

BluetoothAddressToString BluetoothAuthenticateDeviceEx BluetoothDisconnectDevice BluetoothEnableDiscovery BluetoothEnableIncomingConnections BluetoothEnumerateInstalledServices BluetoothEnumerateInstalledServicesEx BluetoothEnumerateLocalServices BluetoothFindBrowseGroupClose BluetoothFindClassIdClose BluetoothFindDeviceClose BluetoothFindFirstBrowseGroup BluetoothFindFirstClassId BluetoothFindFirstDevice BluetoothFindFirstProfileDescriptor BluetoothFindFirstProtocolDescriptorStack BluetoothFindFirstProtocolEntry BluetoothFindFirstRadio BluetoothFindFirstService BluetoothFindFirstServiceEx BluetoothFindNextBrowseGroup BluetoothFindNextClassId BluetoothFindNextDevice BluetoothFindNextProfileDescriptor BluetoothFindNextProtocolDescriptorStack BluetoothFindNextProtocolEntry BluetoothFindNextRadio BluetoothFindNextService BluetoothFindProfileDescriptorClose BluetoothFindProtocolDescriptorStackClose BluetoothFindProtocolEntryClose BluetoothFindRadioClose BluetoothFindServiceClose BluetoothGATTAbortReliableWrite BluetoothGATTBeginReliableWrite BluetoothGATTEndReliableWrite BluetoothGATTGetCharacteristicValue BluetoothGATTGetCharacteristics BluetoothGATTGetDescriptorValue BluetoothGATTGetDescriptors BluetoothGATTGetIncludedServices BluetoothGATTGetServices BluetoothGATTRegisterEvent BluetoothGATTSetCharacteristicValue BluetoothGATTSetDescriptorValue BluetoothGATTUnregisterEvent BluetoothGetDeviceInfo BluetoothGetLocalServiceInfo BluetoothGetRadioInfo BluetoothGetServicePnpInstance BluetoothIsConnectable BluetoothIsDiscoverable BluetoothIsVersionAvailable BluetoothRegisterForAuthentication BluetoothRegisterForAuthenticationEx BluetoothRemoveDevice BluetoothSdpEnumAttributes BluetoothSdpGetAttributeValue BluetoothSdpGetContainerElementData BluetoothSdpGetElementData BluetoothSdpGetString BluetoothSendAuthenticationResponse BluetoothSendAuthenticationResponseEx BluetoothSetLocalServiceInfo BluetoothSetServiceState BluetoothSetServiceStateEx BluetoothUnregisterAuthentication BluetoothUpdateDeviceRecord BthpCheckForUnsupportedGuid BthpCleanupBRDeviceNode BthpCleanupDeviceLocalServices BthpCleanupDeviceRemoteServices BthpCleanupLEDeviceNodes BthpEnableAllServices BthpEnableConnectableAndDiscoverable BthpEnableRadioSoftware BthpFindPnpInfo BthpGATTCloseSession BthpInnerRecord BthpIsBluetoothServiceRunning BthpIsConnectableByDefault BthpIsDiscoverable BthpIsDiscoverableByDefault BthpIsRadioSoftwareEnabled BthpIsTopOfServiceGroup BthpMapStatusToErr BthpNextRecord BthpRegisterForAuthentication BthpSetServiceState BthpSetServiceStateEx BthpTranspose16Bits BthpTranspose32Bits BthpTransposeAndExtendBytes DllCanUnloadNow FindNextOpenVCOMPort InstallIncomingComPort ShouldForceAuthentication

Name

.text

Size

28KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

58d266333af5b53aa99e17e664cba83c28baeb16af7632f0c5c1cfe9536ad735

cfgmgr32

kernel32

ntdll

setupapi

ucrtbase

user32

generic