00efea4a8b351d0604426fdbd34fa333

Sharing

Copy URL Twitter E-mail

General

Target
00efea4a8b351d0604426fdbd34fa333
Size 41KB
Sample231225-dayvesdcen
SHA256 e6ec8de167f4d670e8f38ec3dfc2c29091c77c4c7f5bf781fac8fe21c70a8b82
MD5 00efea4a8b351d0604426fdbd34fa333
SHA1 a5fe0b61b44646e688ca4c2290bd5f2cd13bfd35
SHA512 02193c6831622b171b470b2b188d5b83d41f6b47f3691edc0c47fb25d27681b83c533c62a5c0b872fd3a8615a9b2c9117af3a1fa2f47ac4586c04b673c875c28
SSDEEP 768:X4uTNX21cJy37RF9V9jq0iy9adNRlfjtswjz0D35FS6sWkJTU5/ggN:hTAOMdV9jqzdvewjz0D1kJTiIu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00efea4a8b351d0604426fdbd34fa333

File Explorer

00efea4a8b351d0604426fdbd34fa333

.exe 41KB

00efea4a8b351d0604426fdbd34fa333

IMPHASH 18bc6fa81e19f21156316b1ae696ed6b
SHA256 e6ec8de167f4d670e8f38ec3dfc2c29091c77c4c7f5bf781fac8fe21c70a8b82
MD5 00efea4a8b351d0604426fdbd34fa333
SHA1 a5fe0b61b44646e688ca4c2290bd5f2cd13bfd35
SHA512 02193c6831622b171b470b2b188d5b83d41f6b47f3691edc0c47fb25d27681b83c533c62a5c0b872fd3a8615a9b2c9117af3a1fa2f47ac4586c04b673c875c28
SSDEEP 768:X4uTNX21cJy37RF9V9jq0iy9adNRlfjtswjz0D35FS6sWkJTU5/ggN:hTAOMdV9jqzdvewjz0D1kJTiIu
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess lstrcmpiA ExitProcess GetCommandLineA GetWindowsDirectoryA GetTempPathA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA lstrcmpA GetEnvironmentVariableA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA CopyFileA

user32

ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard EndDialog AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA TrackPopupMenu ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

00efea4a8b351d0604426fdbd34fa333

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic