Tidy Up the Flower Shop[.]exe

General

Target
Tidy Up the Flower Shop.exe
Size 651KB
Sample261030-e1c63swt6n
SHA256 42142dd14bd01c5c60dbdc886fa042d03274fe4c7f6b6d988fb7b6bd1c1c44ea
MD5 e89694f97bfb2e6c48cefc9be046a610
SHA1 f23dd1dc26e97f4d888c7714a7ff904e31841dbb
SHA512 3cd757a6c8c7b30dbbef79bcad8799fcb5035a5e85523ef1cee6581351008e554c30ca6b8068b1e0f6e8da911a7fb0550c65593814597928201b89cc6c5772a5
SSDEEP 6144:YaMjvuUwZpBUhLHruSaewywwvd5Qpzir4:YtVwZp6h/Taxywwvd5Q4
TLSH
T1ECE43B61D10B9899EED4E63FC0F6C23383A86B5D1C5C8A4E22B1FDB23F61495E94467C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Tidy Up the Flower Shop.exe

File Explorer

Tidy Up the Flower Shop.exe

.exe 651KB

Tidy Up the Flower Shop.exe

IMPHASH a136217cdd3247ff6a8766561064ca0b
SHA256 42142dd14bd01c5c60dbdc886fa042d03274fe4c7f6b6d988fb7b6bd1c1c44ea
MD5 e89694f97bfb2e6c48cefc9be046a610
SHA1 f23dd1dc26e97f4d888c7714a7ff904e31841dbb
SHA512 3cd757a6c8c7b30dbbef79bcad8799fcb5035a5e85523ef1cee6581351008e554c30ca6b8068b1e0f6e8da911a7fb0550c65593814597928201b89cc6c5772a5
SSDEEP 6144:YaMjvuUwZpBUhLHruSaewywwvd5Qpzir4:YtVwZp6h/Taxywwvd5Q4
TLSH
T1ECE43B61D10B9899EED4E63FC0F6C23383A86B5D1C5C8A4E22B1FDB23F61495E94467C
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

unityplayer

UnityMain2

kernel32

HeapAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CloseHandle RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Sharing