bb4e74a6c5c08cd6c0a68f49ef6c24c64d84a67078a2b29365de26d26fbe4e12

Sharing

Copy URL Twitter E-mail

General

Target
bb4e74a6c5c08cd6c0a68f49ef6c24c64d84a67078a2b29365de26d26fbe4e12
Size 1.8MB
Sample261020-jdkd4aw1ev
SHA256 bb4e74a6c5c08cd6c0a68f49ef6c24c64d84a67078a2b29365de26d26fbe4e12
MD5 b1946093cee3d8aef2b2033f3b665a44
SHA1 b81438bfe41663190d55a71245007cfe9d8f285b
SHA512 9a287c0052707716ebdab66598131528ab58ccd73bda07baf1f177e73b14156799365e8f4e7a17c7eb5ef5dd05ec03dbc6a4f26fd66ab1b117842b896fc82c90
SSDEEP 49152:47PqqfbjWoRGw7uOMkBjxFT6f6nKaEZXflCj5cvs/H8B:GPbfbjWbwqOMkJxFuflxpWwk6
TLSH
T16295E06031218639DBA1A0B1CD7AAAEE133CAD604B6558D777D43E6E3F705E33B31426
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb4e74a6c5c08cd6c0a68f49ef6c24c64d84a67078a2b29365de26d26fbe4e12

File Explorer

bb4e74a6c5c08cd6c0a68f49ef6c24c64d84a67078a2b29365de26d26fbe4e12

.exe 1.8MB

bb4e74a6c5c08cd6c0a68f49ef6c24c64d84a67078a2b29365de26d26fbe4e12

IMPHASH bf9bbf62ea6852dd5d95f2a37141ab26
SHA256 bb4e74a6c5c08cd6c0a68f49ef6c24c64d84a67078a2b29365de26d26fbe4e12
MD5 b1946093cee3d8aef2b2033f3b665a44
SHA1 b81438bfe41663190d55a71245007cfe9d8f285b
SHA512 9a287c0052707716ebdab66598131528ab58ccd73bda07baf1f177e73b14156799365e8f4e7a17c7eb5ef5dd05ec03dbc6a4f26fd66ab1b117842b896fc82c90
SSDEEP 49152:47PqqfbjWoRGw7uOMkBjxFT6f6nKaEZXflCj5cvs/H8B:GPbfbjWbwqOMkJxFuflxpWwk6
TLSH
T16295E06031218639DBA1A0B1CD7AAAEE133CAD604B6558D777D43E6E3F705E33B31426
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

285331

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\jenkins\build\workspace\miflash_git\out\Release\bin\(TargetName).pdb

libcef

cef_string_list_size cef_string_list_value cef_string_list_append cef_string_map_size cef_string_map_key cef_string_map_value cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append cef_string_multimap_alloc cef_string_multimap_free cef_uriencode cef_base64encode cef_enable_highdpi_support cef_quit_message_loop cef_run_message_loop cef_shutdown cef_initialize cef_execute_process cef_api_hash cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_request_context_get_global_context cef_log cef_browser_view_get_for_browser cef_string_userfree_utf16_free cef_browser_host_create_browser cef_string_list_free cef_string_list_alloc cef_string_utf16_cmp cef_string_utf8_clear cef_string_utf16_to_utf8 cef_string_utf8_to_utf16 cef_string_ascii_to_utf16 cef_string_utf16_clear cef_string_utf16_set

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

kernel32

GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetConsoleMode HeapSize WriteConsoleW GetFileSizeEx SetStdHandle SetEnvironmentVariableW WriteFile CreateFileW CloseHandle HeapFree HeapAlloc GetProcessHeap CreateDirectoryW WritePrivateProfileStringW GetCommandLineW GetCurrentProcess GetModuleFileNameW GetUserDefaultLocaleName CreateMutexW FormatMessageW GetTimeZoneInformation GetLastError VerSetConditionMask GetModuleHandleW WideCharToMultiByte VerifyVersionInfoW IsWow64Process SetLastError FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetFileType GetStdHandle GetModuleHandleExW ExitProcess LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc RaiseException RtlUnwind InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetProcAddress CreateEventW WaitForSingleObjectEx ResetEvent SetEvent InitializeCriticalSectionAndSpinCount GetCPInfo GetStringTypeW LCMapStringEx MultiByteToWideChar DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection

user32

SetWindowTextW GetSystemMetrics MessageBoxW

Sharing

General

Malware Config

Signatures

File Explorer

bb4e74a6c5c08cd6c0a68f49ef6c24c64d84a67078a2b29365de26d26fbe4e12

libcef

iphlpapi

version

kernel32

user32

generic