675e1ae4cd1344129accc020ba24566c114252ddae638c2fdb47c6bd41e9f0dd

General

Target
675e1ae4cd1344129accc020ba24566c114252ddae638c2fdb47c6bd41e9f0dd
Size 106KB
Sample261105-rss9jsgf29
SHA256 675e1ae4cd1344129accc020ba24566c114252ddae638c2fdb47c6bd41e9f0dd
MD5 66130aa677a78dc3c8ac63a92a49fb15
SHA1 1f6550f21fe277db9bcfad837a5aff1206f4b982
SHA512 05c37e3300f0fb5e223538c1d367870da42fe729f38309e9439b91586a9bfef87e2d1ec128107d6abab0fb5a26d2664ca1934248a1b0d91fc2b192d07b4d45d7
SSDEEP 1536:/9IpMdyjXsV+qgqDTmI8KzoHVZXgZ1iw0zZHyFfHYTomk9GCq2iW7z:/9GoFo1g1ihZHkfHYTom4GCH
TLSH
T18FB3AE52B2D0D076C05615304C7AC3711A7AFC3696B8D94B77C5BB3E1E713C1AA2A727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
675e1ae4cd1344129accc020ba24566c114252ddae638c2fdb47c6bd41e9f0dd

File Explorer

675e1ae4cd1344129accc020ba24566c114252ddae638c2fdb47c6bd41e9f0dd

.exe 106KB

675e1ae4cd1344129accc020ba24566c114252ddae638c2fdb47c6bd41e9f0dd

IMPHASH af457a899dff0be8f96c758b66fd5f37
SHA256 675e1ae4cd1344129accc020ba24566c114252ddae638c2fdb47c6bd41e9f0dd
MD5 66130aa677a78dc3c8ac63a92a49fb15
SHA1 1f6550f21fe277db9bcfad837a5aff1206f4b982
SHA512 05c37e3300f0fb5e223538c1d367870da42fe729f38309e9439b91586a9bfef87e2d1ec128107d6abab0fb5a26d2664ca1934248a1b0d91fc2b192d07b4d45d7
SSDEEP 1536:/9IpMdyjXsV+qgqDTmI8KzoHVZXgZ1iw0zZHyFfHYTomk9GCq2iW7z:/9GoFo1g1ihZHkfHYTom4GCH
TLSH
T18FB3AE52B2D0D076C05615304C7AC3711A7AFC3696B8D94B77C5BB3E1E713C1AA2A727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

110592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Vinay\Projects\simple_launcher\dist\w32.pdb

kernel32

ExitProcess GetCommandLineW SearchPathW SetInformationJobObject FreeLibrary CreateProcessW SetHandleInformation WaitForSingleObjectEx AssignProcessToJobObject FormatMessageW GetExitCodeProcess GetModuleFileNameW QueryInformationJobObject MultiByteToWideChar GetStartupInfoW GetTempPathW CreateJobObjectA GetStdHandle GetLastError GetProcAddress SetStdHandle LoadLibraryA GetFileType SetConsoleCtrlHandler SetCurrentDirectoryW CloseHandle GetProcessHeap SetEndOfFile SetEnvironmentVariableW CompareStringW IsProcessorFeaturePresent FlushFileBuffers GetConsoleMode GetConsoleCP HeapReAlloc GetModuleHandleW DecodePointer HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetStringTypeW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount GetCommandLineA HeapSetInformation RtlUnwind DeleteCriticalSection LoadLibraryW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage SetHandleCount Sleep LCMapStringW ReadFile SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CreateFileW HeapSize WriteConsoleW

user32

PostMessageW WaitForInputIdle PeekMessageW CreateWindowExW GetMessageW DestroyWindow

shlwapi

PathCombineW StrStrIW PathRemoveFileSpecW

Name

.text

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�\ �u+

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

675e1ae4cd1344129accc020ba24566c114252ddae638c2fdb47c6bd41e9f0dd

kernel32

user32

shlwapi

generic