sampleB_clean[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
sampleB_clean.exe
Size 790KB
Sample261009-set5csbe95
SHA256 07bba53979eb850bf074a099b3cf262c2d05f3a41a26a49ae293d3b00b15505a
MD5 2d55a2792b0aa93ee579932b7a26715d
SHA1 fcbcdc8e22a129da2ebaf5bf202e364132a11c30
SHA512 d5fb83a5f441436ef02484f9ca42480838f9a62c420a172fe825a52a25b74ce95c294d0795f6ab3ee297562d5d4c429d7731136b3346c6c6b924df8e1f3a082a
SSDEEP 12288:QRbnnnSjKasiLQaxchlKd8vQn+/P4ayCk9I9Clkf9x:QRej/sdah8vpoPS9COf9x
TLSH
T1C205DF877790C1B2DBED2530FC4A82D1A4646ED1EF7220DBB5E17B9E2479260D12BB43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sampleB_clean.exe

File Explorer

sampleB_clean.exe

.exe 790KB

sampleB_clean.exe

IMPHASH a68b1bbef0ab8fcb6294ddd6d82a7ee9
SHA256 07bba53979eb850bf074a099b3cf262c2d05f3a41a26a49ae293d3b00b15505a
MD5 2d55a2792b0aa93ee579932b7a26715d
SHA1 fcbcdc8e22a129da2ebaf5bf202e364132a11c30
SHA512 d5fb83a5f441436ef02484f9ca42480838f9a62c420a172fe825a52a25b74ce95c294d0795f6ab3ee297562d5d4c429d7731136b3346c6c6b924df8e1f3a082a
SSDEEP 12288:QRbnnnSjKasiLQaxchlKd8vQn+/P4ayCk9I9Clkf9x:QRej/sdah8vpoPS9COf9x
TLSH
T1C205DF877790C1B2DBED2530FC4A82D1A4646ED1EF7220DBB5E17B9E2479260D12BB43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

277299

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

dbghelp

ImageNtHeader

kernel32

LCMapStringA SetStdHandle WriteConsoleA GetStringTypeA QueryPerformanceCounter GetStringTypeW GetLocaleInfoA CompareStringA CompareStringW SetEndOfFile InitializeCriticalSectionAndSpinCount Sleep CreateFileW GetLastError WriteFile ReadFile GetProcAddress LoadLibraryA GetUserDefaultLCID CloseHandle CreateFileA CreateDirectoryA GetLongPathNameW ExitProcess RemoveDirectoryA FindClose FindNextFileA DeleteFileA FindFirstFileA WideCharToMultiByte MultiByteToWideChar AreFileApisANSI FindFirstFileW GetShortPathNameA GetModuleFileNameA GetShortPathNameW GetModuleFileNameW GetWindowsDirectoryA GetLongPathNameA GetEnvironmentVariableA GetTempPathA GetWindowsDirectoryW GetEnvironmentVariableW GetTempPathW GetTempFileNameA GetFullPathNameW GetFullPathNameA FreeEnvironmentStringsW GetEnvironmentStringsW FreeEnvironmentStringsA GetEnvironmentStrings GetConsoleOutputCP DuplicateHandle GetCurrentProcess TerminateProcess GetExitCodeProcess WaitForSingleObject CreateProcessA SetEnvironmentVariableA SearchPathA EnterCriticalSection InitializeCriticalSection LeaveCriticalSection GetCurrentProcessId GetProcessHeap GetMailslotInfo CreateThread CreateMailslotA GetOverlappedResult CancelIo CreateEventA GetCommandLineW CreateSemaphoreA SizeofResource LockResource LoadResource FindResourceA GetTickCount AllocConsole GetModuleHandleA CreateProcessW SetCurrentDirectoryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetSystemTimeAsFileTime CreateDirectoryW RemoveDirectoryW HeapAlloc HeapFree WriteConsoleW GetFileType GetStdHandle GetCommandLineA GetStartupInfoA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection SetHandleCount VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW LoadLibraryW SetEnvironmentVariableW GetTimeZoneInformation GetFileAttributesW

Name

.text

Size

341KB

Virtual Size

340KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

205KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

138KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

sampleB_clean.exe

dbghelp

kernel32

generic