28ae237a90d638d030d6fa4d71e73691e20397aba1ae760d1de924df7ad77241[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
28ae237a90d638d030d6fa4d71e73691e20397aba1ae760d1de924df7ad77241.exe
Size 315KB
Sample230523-s8rakaga36
SHA256 28ae237a90d638d030d6fa4d71e73691e20397aba1ae760d1de924df7ad77241
MD5 0d35c1dc7d3b8ac59b0230936e137810
SHA1 c3f0ebba97b02e01d024c1c554c2180940bddf2b
SHA512 773277e6972f8eb438764d001954161fd2650befec08c7a6f68f55511629df7bf3027f5bc48dfd925b28bf4c467057038af4038af1578dbe07714b01c9457f59
SSDEEP 6144:fDpoe8dhzfwRiQ8RwwDtKckU6m9yhQDzDhpeV:uzIADtXkU5yW/hsV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ae237a90d638d030d6fa4d71e73691e20397aba1ae760d1de924df7ad77241.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

28ae237a90d638d030d6fa4d71e73691e20397aba1ae760d1de924df7ad77241.exe

.exe 315KB

28ae237a90d638d030d6fa4d71e73691e20397aba1ae760d1de924df7ad77241.exe

IMPHASH 59a4a44a250c4cf4f2d9de2b3fe5d95f
SHA256 28ae237a90d638d030d6fa4d71e73691e20397aba1ae760d1de924df7ad77241
MD5 0d35c1dc7d3b8ac59b0230936e137810
SHA1 c3f0ebba97b02e01d024c1c554c2180940bddf2b
SHA512 773277e6972f8eb438764d001954161fd2650befec08c7a6f68f55511629df7bf3027f5bc48dfd925b28bf4c467057038af4038af1578dbe07714b01c9457f59
SSDEEP 6144:fDpoe8dhzfwRiQ8RwwDtKckU6m9yhQDzDhpeV:uzIADtXkU5yW/hsV
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA SearchPathA GetShortPathNameA CreateFileA GetFileSize GetModuleFileNameA ReadFile GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA Sleep CloseHandle GetCommandLineA SetErrorMode LoadLibraryA lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrcpyA lstrcatA GetSystemDirectoryA GetVersion GetProcAddress GlobalAlloc CompareFileTime SetFileTime ExpandEnvironmentStringsA lstrcmpiA lstrcmpA WaitForSingleObject GlobalFree GetExitCodeProcess GetModuleHandleA GetTempPathA GetWindowsDirectoryA LoadLibraryExA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer WriteFile FindClose WritePrivateProfileStringA MultiByteToWideChar MulDiv GetPrivateProfileStringA FreeLibrary

user32

CreateWindowExA EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard GetDC SystemParametersInfoA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer GetDlgItem wsprintfA SetForegroundWindow ShowWindow IsWindow LoadImageA SetWindowLongA SetClipboardData EmptyClipboard OpenClipboard EndPaint PostQuitMessage FindWindowExA SendMessageTimeoutA SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA