b6f6082787133fe6e91ce708238bd92f50a35625f94233b86a5c8e4d7e28af83

Sharing

Copy URL Twitter E-mail

General

Target
b6f6082787133fe6e91ce708238bd92f50a35625f94233b86a5c8e4d7e28af83
Size 736KB
Sample220206-1a5pascbe6
SHA256 b6f6082787133fe6e91ce708238bd92f50a35625f94233b86a5c8e4d7e28af83
MD5 5db540f434c304b0c8b3925f4f0f9ec4
SHA1 556583feaffa1f47e1836748b4d05f914df02301
SHA512 2772d340d7312ff09046bddf8bc2ad58abb3fea4af26dbdaa5c79027f2953759f4401371bae879045c6569561749a3c6ccaa348081bb9be78445013376d088c1
SSDEEP 12288:m6ObzFKsQzxrBvkztENlzBdbb1uG6yWrNRMqF9GQ45rzwxhu41Q17si8AE4uLQJT:VwOx1mELzBRJuwWrMqF9GQQrOO74AQU9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

installer

resource	yara_rule
static1/unpack001/UYTUINVO-0980M.exe	nsis_installer_1
static1/unpack001/UYTUINVO-0980M.exe	nsis_installer_2

File Explorer

b6f6082787133fe6e91ce708238bd92f50a35625f94233b86a5c8e4d7e28af83

.zip 736KB
UYTUINVO-0980M.exe

.exe 760KB

b6f6082787133fe6e91ce708238bd92f50a35625f94233b86a5c8e4d7e28af83

SHA256 b6f6082787133fe6e91ce708238bd92f50a35625f94233b86a5c8e4d7e28af83
MD5 5db540f434c304b0c8b3925f4f0f9ec4
SHA1 556583feaffa1f47e1836748b4d05f914df02301
SHA512 2772d340d7312ff09046bddf8bc2ad58abb3fea4af26dbdaa5c79027f2953759f4401371bae879045c6569561749a3c6ccaa348081bb9be78445013376d088c1
SSDEEP 12288:m6ObzFKsQzxrBvkztENlzBdbb1uG6yWrNRMqF9GQ45rzwxhu41Q17si8AE4uLQJT:VwOx1mELzBRJuwWrMqF9GQQrOO74AQU9
MD5 SHA1 SHA512 SSDEEP

UYTUINVO-0980M.exe

IMPHASH b76363e9cb88bf9390860da8e50999d2
SHA256 48ee5dff920a4d725d5356561c31b5dc86637ff17bb653f0d39cc3485ce905e9
MD5 ff7a09ab13940871ecf1cf32ec38c24a
SHA1 eb231cec15fd73eb18e4dffc124475589083b59f
SHA512 5ea5855b1dea4206a9ec1223898122dae8232dfcda9d0d492ad47d0dbeaf20715ab272f07842775bdfc4074fe77acbcc2a4db19dec99628100cde54709db03bc
SSDEEP 12288:/8ek6zxZ7vkBtE1lDB5bblAGyWWrNJkqF9KQ4Lr/cj7uytQ17si8aE48LMJ52:/8MxBuEzDBdRAmWvkqF9KQyraa74aiYm
MD5 SHA1 SHA512 SSDEEP

windows x86

NSIS installer

installer

Minor OS version

Major OS version

Entry point

12586

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA SetFileAttributesA CompareFileTime SearchPathA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA GetTempPathA Sleep lstrcmpiA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrcatA GetSystemDirectoryA WaitForSingleObject SetFileTime CloseHandle GlobalFree lstrcmpA ExpandEnvironmentStringsA GetExitCodeProcess GlobalAlloc lstrlenA GetCommandLineA GetProcAddress FindFirstFileA FindNextFileA DeleteFileA SetFilePointer ReadFile FindClose GetPrivateProfileStringA WritePrivateProfileStringA WriteFile MulDiv MultiByteToWideChar LoadLibraryExA GetModuleHandleA FreeLibrary

user32

SetCursor GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor EndDialog ScreenToClient LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetForegroundWindow GetWindowLongA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx SetTimer PostQuitMessage SetWindowLongA SendMessageTimeoutA LoadImageA wsprintfA GetDlgItem FindWindowExA IsWindow SetClipboardData EmptyClipboard OpenClipboard EndPaint CreateDialogParamA DestroyWindow ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA ShellExecuteA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_AddMasked ImageList_Destroy ImageList_Create ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance