4a69388429a2fef9e3a04879385ad65b

Sharing

Copy URL Twitter E-mail

General

Target
4a69388429a2fef9e3a04879385ad65b
Size 446KB
Sample240108-etw1lsbhf2
SHA256 b780cfa96fbce4ec134563b7a18a8ecf3cb9617db3ebbeee5c07c98488659134
MD5 4a69388429a2fef9e3a04879385ad65b
SHA1 83fe04502a93832ec5b73b67f3fc372a419a4af2
SHA512 8d67a66eadb41c14b37dc3fa6451f0d631f86561098960b5a1edcc9db9c2203c32825cad833560ba7c598f59b2279248ba74969ad7bc3780874dc4b4199c9f24
SSDEEP 12288:gwxPNipse98Rp+H1VdEsMubom25SeEumH4EZc45JBNeYFP:gM2se+Rpu6V4om2bhmH4vkJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a69388429a2fef9e3a04879385ad65b

File Explorer

4a69388429a2fef9e3a04879385ad65b

.exe 446KB

4a69388429a2fef9e3a04879385ad65b

IMPHASH 0a9aef926d3bca76f52cb2acd9dd6c61
SHA256 b780cfa96fbce4ec134563b7a18a8ecf3cb9617db3ebbeee5c07c98488659134
MD5 4a69388429a2fef9e3a04879385ad65b
SHA1 83fe04502a93832ec5b73b67f3fc372a419a4af2
SHA512 8d67a66eadb41c14b37dc3fa6451f0d631f86561098960b5a1edcc9db9c2203c32825cad833560ba7c598f59b2279248ba74969ad7bc3780874dc4b4199c9f24
SSDEEP 12288:gwxPNipse98Rp+H1VdEsMubom25SeEumH4EZc45JBNeYFP:gM2se+Rpu6V4om2bhmH4vkJ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

112993

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

Chord PolyBezierTo SetColorSpace SetICMMode CreateFontIndirectW GetTextExtentExPointW LPtoDP GetCharABCWidthsFloatW SetICMProfileW GetCurrentObject DeleteEnhMetaFile GetGraphicsMode GetLogColorSpaceW AddFontResourceA GdiPlayJournal CheckColorsInGamut

shell32

ExtractAssociatedIconA RealShellExecuteW SHAddToRecentDocs ExtractAssociatedIconExW ShellExecuteW SHGetDataFromIDListA RealShellExecuteExA SHFileOperation ExtractAssociatedIconExA SheChangeDirA ExtractIconA DoEnvironmentSubstW FindExecutableW SHFileOperationW SHFreeNameMappings RealShellExecuteA DuplicateIcon SHBrowseForFolder ShellAboutW SHAppBarMessage ShellHookProc SHGetDesktopFolder ShellExecuteExA DragQueryFile

advapi32

RegQueryValueW CryptSetHashParam CryptDuplicateKey CryptVerifySignatureW ReportEventA LookupPrivilegeValueW CryptImportKey RegSaveKeyA InitiateSystemShutdownA CryptEncrypt RegDeleteKeyA RegSetValueW GetUserNameW LookupPrivilegeNameW LookupSecurityDescriptorPartsW RegLoadKeyW LookupPrivilegeDisplayNameW RegEnumValueW

user32

GetDlgItem IsDialogMessageA MonitorFromPoint RealGetWindowClass CopyAcceleratorTableW UnhookWinEvent RegisterClassW GetMenuItemInfoA SetClassLongA SetDlgItemTextA EnumDisplaySettingsExW CharToOemBuffA LoadIconW wsprintfA DlgDirSelectExW CreateCaret GetSysColor SystemParametersInfoW DdeConnect DdeAddData

kernel32

SetLastError TerminateProcess SetEnvironmentVariableA GetStringTypeA InterlockedExchange InitializeCriticalSection GetDateFormatA LCMapStringW IsValidCodePage GetFileType GetPrivateProfileIntW TlsGetValue QueryPerformanceCounter GetModuleFileNameW GetCurrentThreadId GetSystemInfo GetCPInfo GetStartupInfoA IsValidLocale GetTimeFormatA GetCurrentThread VirtualFree GetVersionExA IsBadWritePtr GetLastError GetStringTypeW HeapAlloc GetEnvironmentStringsW LCMapStringA GetLocaleInfoA HeapDestroy TlsFree RtlUnwind HeapCreate VirtualAlloc VirtualQuery GetOEMCP GetLocaleInfoW TlsAlloc CompareStringA OpenMutexW UnhandledExceptionFilter CompareStringW GetModuleFileNameA GetSystemTime DeleteCriticalSection GetACP VirtualProtect GetCurrentProcess GetSystemTimeAsFileTime GetTickCount GetModuleHandleA LeaveCriticalSection WideCharToMultiByte FreeLibrary SetHandleCount EnumSystemLocalesA FreeEnvironmentStringsW GetTimeZoneInformation HeapFree HeapReAlloc SetCriticalSectionSpinCount GetStartupInfoW LoadLibraryA GetUserDefaultLCID EnterCriticalSection FreeEnvironmentStringsA GetProcAddress GetCommandLineA ExitProcess HeapSize GetStdHandle MultiByteToWideChar WriteFile GetCurrentProcessId GetCommandLineW TlsSetValue GetEnvironmentStrings

wininet

UpdateUrlCacheContentPath IsUrlCacheEntryExpiredA FindNextUrlCacheEntryW GopherGetLocatorTypeA SetUrlCacheEntryInfoW DeleteUrlCacheEntry InternetSetDialStateW GetUrlCacheGroupAttributeW

Sharing

General

Malware Config

Signatures

File Explorer

4a69388429a2fef9e3a04879385ad65b

gdi32

shell32

advapi32

user32

kernel32

wininet

generic