4a6c92bc86f2e0a8d8a664939dd015b0

Sharing

Copy URL Twitter E-mail

General

Target
4a6c92bc86f2e0a8d8a664939dd015b0
Size 259KB
Sample240108-eye8naahgp
SHA256 4e309c76c4a6a4a687fff7f7fe87af6d8188060265fd86b2b0cf66aaa45da66f
MD5 4a6c92bc86f2e0a8d8a664939dd015b0
SHA1 7c6420f2ea1b678d746a8c16a7f5e3bbf7c99a00
SHA512 903cddcf2055a5a4e6d08acd03f46ee24f873a09c5dfaa886563d3f64a96e5c50ee4978300aa74813450cda8d9a59ba60232f6190e1c93230bdb1c74edcdfb3f
SSDEEP 6144:W2cm/zbtWqPuriEjIShLN+02KmpNXPtTexQyG+sGE3I8CS0mNDq:USftBWMwLXmFixMxh3R9U
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6c92bc86f2e0a8d8a664939dd015b0

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

File Explorer

4a6c92bc86f2e0a8d8a664939dd015b0

.exe 259KB

4a6c92bc86f2e0a8d8a664939dd015b0

IMPHASH 1433f2e02f7db60c6c8547c52a3f8504
SHA256 4e309c76c4a6a4a687fff7f7fe87af6d8188060265fd86b2b0cf66aaa45da66f
MD5 4a6c92bc86f2e0a8d8a664939dd015b0
SHA1 7c6420f2ea1b678d746a8c16a7f5e3bbf7c99a00
SHA512 903cddcf2055a5a4e6d08acd03f46ee24f873a09c5dfaa886563d3f64a96e5c50ee4978300aa74813450cda8d9a59ba60232f6190e1c93230bdb1c74edcdfb3f
SSDEEP 6144:W2cm/zbtWqPuriEjIShLN+02KmpNXPtTexQyG+sGE3I8CS0mNDq:USftBWMwLXmFixMxh3R9U
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

16359

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17 ImageList_AddMasked ImageList_Destroy ImageList_Create

kernel32

ExpandEnvironmentStringsA GetEnvironmentVariableA lstrcmpiA CloseHandle SetFileTime GetFileAttributesA CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA lstrcatA SetCurrentDirectoryA CreateDirectoryA SetFileAttributesA Sleep GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess CopyFileA ExitProcess lstrcpynA GlobalFree GetWindowsDirectoryA GetTempPathA GetUserDefaultLangID GetDiskFreeSpaceA GlobalUnlock GlobalLock GlobalAlloc CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA SetEndOfFile UnmapViewOfFile MapViewOfFile CreateFileMappingA lstrcpyA lstrlenA GetSystemDirectoryA MulDiv DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer WaitForSingleObject GetExitCodeProcess SetErrorMode ReadFile GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile GetCommandLineA

user32

ExitWindowsEx CharNextA DialogBoxParamA GetClassInfoA CreateWindowExA SystemParametersInfoA RegisterClassA EndDialog ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA LoadCursorA SetCursor CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow DispatchMessageA InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint PeekMessageA

gdi32

GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SetBkColor SelectObject

advapi32

RegEnumValueA RegQueryValueExA RegSetValueExA RegCreateKeyExA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegEnumKeyA

shell32

ShellExecuteA SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc SHGetSpecialFolderLocation SHFileOperationA

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

4a6c92bc86f2e0a8d8a664939dd015b0

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

version

generic