66349f9633166cd1dd39fdaf5a8f654ce4168cfbc091513446b134804df3e51a

Sharing

Copy URL Twitter E-mail

General

Target
66349f9633166cd1dd39fdaf5a8f654ce4168cfbc091513446b134804df3e51a
Size 115KB
Sample261030-2dfp1sff72
SHA256 66349f9633166cd1dd39fdaf5a8f654ce4168cfbc091513446b134804df3e51a
MD5 ac5f7806f99df44ca12ca8415a467c25
SHA1 b871b1882f4bf6f5e0e1a5d3e24bb60db225a850
SHA512 cb3e57ec370247fb541bf19c7a28db7392a2da02b4c7cb40712cdc6b3e410229ddc9d305c096362b1fd0a94a91c15106d19f7632f692a2c2087de658a04fa6a8
SSDEEP 1536:M9UMe2OYQmvoq0IMCENNrQXZ6mGcw8u0MsO9+cho3I+JB7SRek3qCcPmg0VKmBfT:IVOrG0I/4uZ6Z8CseWYo4ekAkfye
TLSH
T16CB37C137941A0FCD40AC078C32589A6A772B4CA1F326BFF136951386F9EDE65F38664
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66349f9633166cd1dd39fdaf5a8f654ce4168cfbc091513446b134804df3e51a

File Explorer

66349f9633166cd1dd39fdaf5a8f654ce4168cfbc091513446b134804df3e51a

.exe 115KB

66349f9633166cd1dd39fdaf5a8f654ce4168cfbc091513446b134804df3e51a

IMPHASH c1ee45642a7b5ab69f44b0775681b90c
SHA256 66349f9633166cd1dd39fdaf5a8f654ce4168cfbc091513446b134804df3e51a
MD5 ac5f7806f99df44ca12ca8415a467c25
SHA1 b871b1882f4bf6f5e0e1a5d3e24bb60db225a850
SHA512 cb3e57ec370247fb541bf19c7a28db7392a2da02b4c7cb40712cdc6b3e410229ddc9d305c096362b1fd0a94a91c15106d19f7632f692a2c2087de658a04fa6a8
SSDEEP 1536:M9UMe2OYQmvoq0IMCENNrQXZ6mGcw8u0MsO9+cho3I+JB7SRek3qCcPmg0VKmBfT:IVOrG0I/4uZ6Z8CseWYo4ekAkfye
TLSH
T16CB37C137941A0FCD40AC078C32589A6A772B4CA1F326BFF136951386F9EDE65F38664
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

78640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-a462073e0ddd52e3.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError WaitForSingleObject CloseHandle SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleA

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memmove memset __current_exception __C_specific_handler __CxxFrameHandler3 __current_exception_context memcpy _CxxThrowException memcmp

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

66349f9633166cd1dd39fdaf5a8f654ce4168cfbc091513446b134804df3e51a

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic