780d07dd261b8c0bf922ff41b74283ea76f96c2638601316709a380647df3bf8

General

Target
780d07dd261b8c0bf922ff41b74283ea76f96c2638601316709a380647df3bf8
Size 138KB
Sample261027-nktcsstvbz
SHA256 780d07dd261b8c0bf922ff41b74283ea76f96c2638601316709a380647df3bf8
MD5 73ab80b92908d0f2c7ddd8c55a4de1e8
SHA1 08d31f3374597a18bb3a2893cdcdf4f416518d31
SHA512 32ffd75456677a204abdce1277b61ed40bf32f8069c0d0d733c51b824f6042cf0d6d65371604512abc9158fca2d3a79b3b149324cdad6f999810fe48822dcc37
SSDEEP 3072:m9LoHUB98oAYvu7mMLrzofMk/Uv9xVfWRD:BUT8oApmArz5dC
TLSH
T123D37D5BB3E531F9E1B7863C89A20605E776B83117219BEF039442652F236D09E3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
780d07dd261b8c0bf922ff41b74283ea76f96c2638601316709a380647df3bf8

File Explorer

780d07dd261b8c0bf922ff41b74283ea76f96c2638601316709a380647df3bf8

.exe 138KB

780d07dd261b8c0bf922ff41b74283ea76f96c2638601316709a380647df3bf8

IMPHASH e00b4daea2cdfc628af95e9aafa0956d
SHA256 780d07dd261b8c0bf922ff41b74283ea76f96c2638601316709a380647df3bf8
MD5 73ab80b92908d0f2c7ddd8c55a4de1e8
SHA1 08d31f3374597a18bb3a2893cdcdf4f416518d31
SHA512 32ffd75456677a204abdce1277b61ed40bf32f8069c0d0d733c51b824f6042cf0d6d65371604512abc9158fca2d3a79b3b149324cdad6f999810fe48822dcc37
SSDEEP 3072:m9LoHUB98oAYvu7mMLrzofMk/Uv9xVfWRD:BUT8oApmArz5dC
TLSH
T123D37D5BB3E531F9E1B7863C89A20605E776B83117219BEF039442652F236D09E3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetStdHandle GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW GetFileAttributesW GetFileType WriteFile CloseHandle GetLastError HeapAlloc HeapFree GetProcessHeap WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW FormatMessageW WideCharToMultiByte GetConsoleMode ReadConsoleW WriteConsoleW SetConsoleTitleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW CreateFileW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP

Name

.text

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

389KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

728B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

780d07dd261b8c0bf922ff41b74283ea76f96c2638601316709a380647df3bf8

kernel32

generic