34d982bf55653f4391167dcaad93ab621aa20e768662cb84998231c2cd4a810e

Sharing

Copy URL Twitter E-mail

General

Target
34d982bf55653f4391167dcaad93ab621aa20e768662cb84998231c2cd4a810e
Size 4.8MB
Sample261102-le7bcst15n
SHA256 34d982bf55653f4391167dcaad93ab621aa20e768662cb84998231c2cd4a810e
MD5 a6604f64cd359b39af548394dca4a999
SHA1 ac440b3bd60d0a4d4c487570530045020eb3ebd3
SHA512 652970ed870745cfcdee1123fb2c298dfd2b5470778fff4697a88b88992acb7e7cbe693997e215793c2dcfda8bb7f4db036b890f7b987f93a8a6e0d86d71bd85
SSDEEP 98304:iaBCYt4pA+xq4DwDTBxqf5r/gcWu5Okpes1eoKiiQmtlXyIltetmska0ei:ZB5l+xq4sxO5zmEzgJ20Xhrz
TLSH
T1EC363340B5D2C576C521533541EBAAF5083F3A60236077FFA358AAF61A356E31837BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34d982bf55653f4391167dcaad93ab621aa20e768662cb84998231c2cd4a810e

File Explorer

34d982bf55653f4391167dcaad93ab621aa20e768662cb84998231c2cd4a810e

.exe 4.8MB

34d982bf55653f4391167dcaad93ab621aa20e768662cb84998231c2cd4a810e

IMPHASH 9d23a47fc48aa394ffabbc47bf80e799
SHA256 34d982bf55653f4391167dcaad93ab621aa20e768662cb84998231c2cd4a810e
MD5 a6604f64cd359b39af548394dca4a999
SHA1 ac440b3bd60d0a4d4c487570530045020eb3ebd3
SHA512 652970ed870745cfcdee1123fb2c298dfd2b5470778fff4697a88b88992acb7e7cbe693997e215793c2dcfda8bb7f4db036b890f7b987f93a8a6e0d86d71bd85
SSDEEP 98304:iaBCYt4pA+xq4DwDTBxqf5r/gcWu5Okpes1eoKiiQmtlXyIltetmska0ei:ZB5l+xq4sxO5zmEzgJ20Xhrz
TLSH
T1EC363340B5D2C576C521533541EBAAF5083F3A60236077FFA358AAF61A356E31837BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51843

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetLastError SetLastError InitializeCriticalSectionAndSpinCount FreeLibrary GetProcAddress LoadLibraryExW SizeofResource LockResource LoadLibraryW FindResourceW WriteFile GetModuleFileNameW CreateFileW CloseHandle GetCurrentProcessId GetCurrentProcess GetTempPathW GetFileAttributesW GetCurrentDirectoryW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection IsDebuggerPresent GetCurrentThreadId Sleep RaiseException GetCommandLineW SetFilePointerEx FlushFileBuffers FindFirstFileExW FindNextFileW FindClose GetModuleHandleW GetSystemTimeAsFileTime QueryPerformanceCounter GetModuleHandleExW GetVersionExW GetNativeSystemInfo TlsSetValue TlsAlloc TlsGetValue TlsFree GetEnvironmentVariableW GetSystemInfo GetSystemDirectoryW GetWindowsDirectoryW IsValidCodePage GetDriveTypeW WriteConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetACP GetStdHandle HeapReAlloc ExitProcess HeapSize GetFileType SetStdHandle GetFullPathNameW GetConsoleMode GetConsoleCP LoadLibraryExA HeapFree LoadLibraryA HeapAlloc GetProcessHeap IsBadReadPtr WideCharToMultiByte EncodePointer DecodePointer MultiByteToWideChar LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead RtlUnwind

ole32

CoTaskMemFree

Name

.text

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

444B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.ress

Size

10.5MB

Virtual Size

10.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

34d982bf55653f4391167dcaad93ab621aa20e768662cb84998231c2cd4a810e

kernel32

ole32

generic