c457c55f86e0a6027ce70eaf3e60028ad5eb304c7baa18e8b42663abcfc0dd5d

General

Target
c457c55f86e0a6027ce70eaf3e60028ad5eb304c7baa18e8b42663abcfc0dd5d
Size 6.2MB
Sample261026-swar2sbd55
SHA256 c457c55f86e0a6027ce70eaf3e60028ad5eb304c7baa18e8b42663abcfc0dd5d
MD5 1b5333d346c9db1133c70031cb11fcb4
SHA1 96a2cf792e9362a431012e9d555eb5e18380f3c2
SHA512 7a35043edc4bd860959de042024a326d1eb07251ab95272b4f2602ee6513561ad68d147972b7098da4897dfcf7be9714a0949bf4b59e928c316867475d03bf0a
SSDEEP 196608:NNcn468vqQXEW7V1GNXftNEYB9KE808FW2O3L28:Lcn18vz97V1GNXfLD8FIq8
TLSH
T190663362E1A505FDD14B6D79C6A40C0EF671BC450BE06EEB430407B8AF669E4BF3D612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c457c55f86e0a6027ce70eaf3e60028ad5eb304c7baa18e8b42663abcfc0dd5d

File Explorer

c457c55f86e0a6027ce70eaf3e60028ad5eb304c7baa18e8b42663abcfc0dd5d

.exe 6.2MB

c457c55f86e0a6027ce70eaf3e60028ad5eb304c7baa18e8b42663abcfc0dd5d

IMPHASH 9fbbc81ed06abc942e7f1f214a9c8061
SHA256 c457c55f86e0a6027ce70eaf3e60028ad5eb304c7baa18e8b42663abcfc0dd5d
MD5 1b5333d346c9db1133c70031cb11fcb4
SHA1 96a2cf792e9362a431012e9d555eb5e18380f3c2
SHA512 7a35043edc4bd860959de042024a326d1eb07251ab95272b4f2602ee6513561ad68d147972b7098da4897dfcf7be9714a0949bf4b59e928c316867475d03bf0a
SSDEEP 196608:NNcn468vqQXEW7V1GNXftNEYB9KE808FW2O3L28:Lcn18vz97V1GNXfLD8FIq8
TLSH
T190663362E1A505FDD14B6D79C6A40C0EF671BC450BE06EEB430407B8AF669E4BF3D612
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

21200

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

ShellExecuteExW SHGetFolderPathW

kernel32

FlsSetValue WriteConsoleW GetCommandLineW CreateDirectoryW CreateFileW DeleteFileW GetFileSizeEx ReadFile SetFilePointerEx WriteFile CloseHandle GetLastError WaitForSingleObject GetCurrentProcessId GetTickCount FreeLibrary GetModuleFileNameW GetModuleHandleA GetProcAddress LoadLibraryA LoadLibraryW HeapAlloc HeapFree GetProcessHeap GetProcessId GetModuleHandleW FindClose FindFirstFileW FindNextFileW SetEndOfFile SetFilePointer GetWindowsDirectoryW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetConsoleMode RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetStdHandle GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP

Name

.text

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

130KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c457c55f86e0a6027ce70eaf3e60028ad5eb304c7baa18e8b42663abcfc0dd5d

shell32

kernel32

generic