67b5a76dd1bf8fc39b9c9c7afe2c768d9b9edaed27d6bb894833f2d83c39665d

Sharing

Copy URL Twitter E-mail

General

Target
67b5a76dd1bf8fc39b9c9c7afe2c768d9b9edaed27d6bb894833f2d83c39665d
Size 211KB
Sample230518-prphvshf7t
SHA256 67b5a76dd1bf8fc39b9c9c7afe2c768d9b9edaed27d6bb894833f2d83c39665d
MD5 aeab04ca5a033861e4ef8ab7b59b98c3
SHA1 20fda2743ea4ca696fb4b797e4f69740a428b566
SHA512 84d84a34f447475e59b663e911e55f885c646f07563e1652ddfcb2412d9fb749dfde4e9d57b3aab4bc34bf905931224d4c41317fd643ed4d8516c399a777bd06
SSDEEP 3072:XPK40EkykKqUa9antF5hvvJkuXpqQhJkKqUa9antF5hvvJkuXpv:/aVKq99UF5hvv/zh6Kq99UF5hvv/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b5a76dd1bf8fc39b9c9c7afe2c768d9b9edaed27d6bb894833f2d83c39665d

File Explorer

67b5a76dd1bf8fc39b9c9c7afe2c768d9b9edaed27d6bb894833f2d83c39665d

.exe 211KB

67b5a76dd1bf8fc39b9c9c7afe2c768d9b9edaed27d6bb894833f2d83c39665d

IMPHASH 4fd11f5c9a089e7b45c77cd8b5fde1cf
SHA256 67b5a76dd1bf8fc39b9c9c7afe2c768d9b9edaed27d6bb894833f2d83c39665d
MD5 aeab04ca5a033861e4ef8ab7b59b98c3
SHA1 20fda2743ea4ca696fb4b797e4f69740a428b566
SHA512 84d84a34f447475e59b663e911e55f885c646f07563e1652ddfcb2412d9fb749dfde4e9d57b3aab4bc34bf905931224d4c41317fd643ed4d8516c399a777bd06
SSDEEP 3072:XPK40EkykKqUa9antF5hvvJkuXpqQhJkKqUa9antF5hvvJkuXpv:/aVKq99UF5hvv/zh6Kq99UF5hvv/
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29452

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegOpenKeyExW RegEnumKeyW RegCloseKey RegQueryValueExW RegSetValueExW

kernel32

Sleep SetEvent GetDriveTypeW FormatMessageW GetWindowsDirectoryW CreateThread GetDiskFreeSpaceW GetVolumeInformationW FreeLibrary LoadLibraryExW GetProcessHeap HeapFree lstrlenW GetTickCount CheckElevationEnabled GetModuleFileNameW GetLastError LocalFree HeapSetInformation CreateEventW CloseHandle WaitForSingleObject GetDiskFreeSpaceExW GetCommandLineW SetErrorMode GetStartupInfoA GetModuleHandleW MulDiv WideCharToMultiByte LocalAlloc RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter SetUnhandledExceptionFilter HeapAlloc GetVolumeNameForVolumeMountPointW

gdi32

GetLayout ExtTextOutW SetBkMode SetTextColor SetBkColor GetTextExtentPoint32W

user32

MessageBoxW ShowWindow SetFocus SendMessageW GetDlgItem EndDialog DialogBoxParamW DestroyWindow CreateDialogParamW IsDialogMessageW LoadStringW LoadIconW GetWindowLongPtrW EnableWindow GetWindowLongW GetSystemMetrics SetWindowLongPtrW GetClientRect SetDlgItemTextW EnumWindows DispatchMessageW TranslateMessage PeekMessageW GetSysColor SetForegroundWindow GetWindowTextW DrawFocusRect DestroyIcon DrawIconEx GetParent PostMessageW SendDlgItemMessageW

msvcrt

__set_app_type _fmode _commode ?terminate@@YAXXZ memset __setusermatherr _amsg_exit _initterm exit _cexit _exit _XcptFilter __C_specific_handler __getmainargs _vsnwprintf toupper _wcsicmp

ntdll

NtOpenProcessToken NtClose NtOpenThreadToken RtlNtStatusToDosError WinSqmAddToStream NtQueryInformationToken

ole32

CoTaskMemAlloc CoInitialize CoUninitialize CLSIDFromString CoTaskMemFree CoCreateInstance CoInitializeEx

oleaut32

VariantClear SysStringLen VariantInit

shlwapi

StrStrIW StrToIntW StrCmpW StrCmpNW PathStripToRootW ord271 StrFormatByteSizeW ord487 SHDeleteKeyW

comctl32

PropertySheetW ImageList_Create ImageList_ReplaceIcon ord17 CreatePropertySheetPageW ord345

shell32

ShellExecuteExW SHGetFileInfoW ExtractIconExW ord680

vssapi

CreateVssBackupComponentsInternal VssFreeSnapshotPropertiesInternal