439e2214366a87dc2ab476f5119f029b

Sharing

Copy URL Twitter E-mail

General

Target
439e2214366a87dc2ab476f5119f029b
Size 48KB
Sample240105-nzxnrscba2
SHA256 f9de964d31d5fe30253f7b9eccd97a6ffb10da150fcbc7eac4b6f2d25cca58ff
MD5 439e2214366a87dc2ab476f5119f029b
SHA1 5c272509b8d925d425c590a17b9c97cbdee6ebdb
SHA512 28cc39253a29cd3bf6fb8fe503e96e2fccd7b81469352ce10f7d06f724f60cb80c34bb67a9b9b6ac5dbc440b057eb336e50435ff23b7bbedec2d164bca6960d2
SSDEEP 384:pLAJAfLxVOZ0Z8/QqEUfDhcI3VoXnK8BVPUzp7WpIzjI/PcBogvt3aAE9dfu:5Ugt4ZyDuuEozal7Wu3HBogvtqH9dfu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439e2214366a87dc2ab476f5119f029b

File Explorer

439e2214366a87dc2ab476f5119f029b

.exe 48KB

439e2214366a87dc2ab476f5119f029b

IMPHASH 2700cd3db41a7fdc355b3bb09fe4d0cf
SHA256 f9de964d31d5fe30253f7b9eccd97a6ffb10da150fcbc7eac4b6f2d25cca58ff
MD5 439e2214366a87dc2ab476f5119f029b
SHA1 5c272509b8d925d425c590a17b9c97cbdee6ebdb
SHA512 28cc39253a29cd3bf6fb8fe503e96e2fccd7b81469352ce10f7d06f724f60cb80c34bb67a9b9b6ac5dbc440b057eb336e50435ff23b7bbedec2d164bca6960d2
SSDEEP 384:pLAJAfLxVOZ0Z8/QqEUfDhcI3VoXnK8BVPUzp7WpIzjI/PcBogvt3aAE9dfu:5Ugt4ZyDuuEozal7Wu3HBogvtqH9dfu
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4571

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegOpenKeyExW RegCreateKeyExA RegEnumKeyW RegOpenKeyA RegReplaceKeyA RegQueryValueA RegCreateKeyW RegEnumKeyExA RegDeleteValueA RegFlushKey RegQueryValueW RegEnumKeyA RegQueryValueExA RegEnumValueW RegQueryValueExW RegEnumKeyExW RegLoadKeyW RegOpenKeyW RegQueryInfoKeyW

gdi32

GetPixel AddFontResourceW DeleteDC AddFontResourceExA GetPixel ExtTextOutA BeginPath DeleteObject AddFontMemResourceEx CancelDC SetTextColor GetDCOrgEx AddFontResourceTracking CopyMetaFileA AddFontResourceExW GetBitmapBits RestoreDC ClearBrushAttributes GetClipBox CloseFigure CreateSolidBrush

user32

IsMenu DrawIcon DialogBoxParamA EndDialog IsWindow LoadCursorA InsertMenuA AppendMenuW LoadMenuA CopyIcon CopyRect CopyImage CloseWindow BlockInput GetDlgItem GetWindowTextLengthA GetWindowTextA GetFocus DrawTextW

kernel32

GetCPInfo CopyFileExA DeleteAtom CopyFileW SetLastError ExitThread GetFileTime GlobalFree GetCommandLineA GetComputerNameA DeleteFileW DeleteFileA CopyFileA CreateDirectoryA GetLastError Sleep WriteFile OpenFileMappingA

comctl32

ImageList_Merge ImageList_BeginDrag ImageList_EndDrag ImageList_DrawEx ImageList_Destroy ImageList_Remove ImageList_AddMasked ImageList_Create InitCommonControls ImageList_LoadImage ImageList_ReplaceIcon ImageList_Copy ImageList_AddIcon ImageList_DragEnter ImageList_GetImageCount ImageList_Draw ImageList_GetIconSize ImageList_GetImageRect ImageList_DragLeave

Sharing

General

Malware Config

Signatures

File Explorer

439e2214366a87dc2ab476f5119f029b

advapi32

gdi32

user32

kernel32

comctl32

generic