17610de6185f75ba3e15ce3d750c8a86

Sharing

Copy URL Twitter E-mail

General

Target
17610de6185f75ba3e15ce3d750c8a86
Size 140KB
Sample231230-ntfs3aabhl
SHA256 55db08e58738ec61f440c4d99334720d20cd5679a3c709b02c88e94c28951c10
MD5 17610de6185f75ba3e15ce3d750c8a86
SHA1 8283be4a127882c45984ddd5ab361a1c171c3ae3
SHA512 d8250c12324b580dfe0f8ad13d559a2d62b32cf5577fda9d41147767ff3a086305e382347deddc0a806e6f95317c3522d9e1231e1da93183d59e94471af46fef
SSDEEP 1536:yioQGnE4u0LkT2biRCR4TdFGntt1mQ8nU+YD3q7VoagHA:Pp7okTJRC5ttOnU3a7Voa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17610de6185f75ba3e15ce3d750c8a86

File Explorer

17610de6185f75ba3e15ce3d750c8a86

.exe 140KB

17610de6185f75ba3e15ce3d750c8a86

IMPHASH 1172d1fb03f167a962867ea1a907fbd7
SHA256 55db08e58738ec61f440c4d99334720d20cd5679a3c709b02c88e94c28951c10
MD5 17610de6185f75ba3e15ce3d750c8a86
SHA1 8283be4a127882c45984ddd5ab361a1c171c3ae3
SHA512 d8250c12324b580dfe0f8ad13d559a2d62b32cf5577fda9d41147767ff3a086305e382347deddc0a806e6f95317c3522d9e1231e1da93183d59e94471af46fef
SSDEEP 1536:yioQGnE4u0LkT2biRCR4TdFGntt1mQ8nU+YD3q7VoagHA:Pp7okTJRC5ttOnU3a7Voa
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4771

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegQueryInfoKeyA RegOpenKeyExW RegLoadKeyA RegQueryInfoKeyW RegCreateKeyExA RegLoadKeyW RegFlushKey RegDeleteValueW RegQueryValueW RegEnumKeyExW RegReplaceKeyA RegQueryValueExW RegEnumKeyA RegOpenKeyW RegDeleteKeyW RegCreateKeyExW RegReplaceKeyW RegDeleteValueA RegQueryValueExA RegDeleteKeyA RegCreateKeyW RegQueryValueW RegQueryInfoKeyW RegEnumValueA RegEnumKeyA RegEnumKeyExW RegDeleteValueA RegOpenKeyExW RegEnumKeyW RegDeleteValueW RegCreateKeyExA RegQueryInfoKeyA RegCreateKeyW RegQueryValueExW RegGetKeySecurity RegDeleteKeyW

user32

DrawIcon GetDlgItem CalcMenuBar GetMenu GetCursor DrawTextW CloseWindow LoadCursorA DialogBoxParamW InsertMenuA CopyIcon DrawIconEx IsMenu AppendMenuW LoadMenuA CopyRect DialogBoxParamA

comctl32

ImageList_DragEnter ImageList_LoadImageA ImageList_AddIcon ImageList_EndDrag ImageList_DragMove ImageList_GetImageInfo ImageList_Replace ImageList_Remove ImageList_LoadImage ImageList_ReplaceIcon ImageList_Draw ImageList_Create InitCommonControls ImageList_BeginDrag ImageList_GetIcon ImageList_DragShowNolock ImageList_DrawEx ImageList_DrawIndirect ImageList_Merge ImageList_GetDragImage ImageList_Copy ImageList_DragLeave ImageList_Destroy ImageList_GetImageCount ImageList_DrawIndirect ImageList_AddMasked ImageList_BeginDrag ImageList_EndDrag ImageList_DragEnter ImageList_Create ImageList_GetImageInfo ImageList_Replace ImageList_DragLeave ImageList_DrawEx ImageList_GetIconSize ImageList_DragMove ImageList_Copy ImageList_LoadImageA ImageList_GetImageRect ImageList_GetIcon ImageList_LoadImageW ImageList_GetDragImage ImageList_Remove ImageList_DragShowNolock ImageList_ReplaceIcon

kernel32

WriteFile FindFirstFileA GetComputerNameA ExitThread GetCommandLineA ReadConsoleW ReadFile CopyFileW DeleteAtom GetConsoleMode DeleteFileA CreateThread CreateDirectoryA GetFileTime CopyFileExA OpenFileMappingA GetFileSize OpenFile CopyFileA

Name

.text

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.init

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

921B

Characteristics

IMAGE_SCN_MEM_READ

Name

.rsrc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

17610de6185f75ba3e15ce3d750c8a86

advapi32

user32

comctl32

kernel32

generic