56e3bde06c00384a76ba0c230480c664630df17fd3a1d5a1bda0574d26618c3f[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
56e3bde06c00384a76ba0c230480c664630df17fd3a1d5a1bda0574d26618c3f.exe
Size 156KB
Sample230706-nm94bsac85
SHA256 56e3bde06c00384a76ba0c230480c664630df17fd3a1d5a1bda0574d26618c3f
MD5 81a1f6dd8065f9be6072fdb5f1badaa0
SHA1 87f58e753835e921ba298e9c78c36d71b95f9352
SHA512 e87a8113cf550f73dfaf82b4458b84d9481417affabb8e672da100ffed6fbe6e5307bfd857cbe7a8a76bb2a9e704fbc992a835c487c807841ba4f619ca382b67
SSDEEP 3072:EAe+3aJpgWXTBuWbhm700zojz+gUE3z4u8QwaN87/eM/u9nUj2dq8toIjB:XB+pgUzE700zwD3cueaN8KHnUjWlj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56e3bde06c00384a76ba0c230480c664630df17fd3a1d5a1bda0574d26618c3f.exe

File Explorer

56e3bde06c00384a76ba0c230480c664630df17fd3a1d5a1bda0574d26618c3f.exe

.exe 156KB

56e3bde06c00384a76ba0c230480c664630df17fd3a1d5a1bda0574d26618c3f.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 56e3bde06c00384a76ba0c230480c664630df17fd3a1d5a1bda0574d26618c3f
MD5 81a1f6dd8065f9be6072fdb5f1badaa0
SHA1 87f58e753835e921ba298e9c78c36d71b95f9352
SHA512 e87a8113cf550f73dfaf82b4458b84d9481417affabb8e672da100ffed6fbe6e5307bfd857cbe7a8a76bb2a9e704fbc992a835c487c807841ba4f619ca382b67
SSDEEP 3072:EAe+3aJpgWXTBuWbhm700zojz+gUE3z4u8QwaN87/eM/u9nUj2dq8toIjB:XB+pgUzE700zwD3cueaN8KHnUjWlj
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13238

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance