99c4ba446289edff9894301900fc5bea

Sharing

Copy URL Twitter E-mail

General

Target
99c4ba446289edff9894301900fc5bea
Size 876KB
Sample240213-wfww5afe77
SHA256 3238be50a645b7049ed3d7ab2b115cfbade1981cde7e4ce7721ed465e8bca4d4
MD5 99c4ba446289edff9894301900fc5bea
SHA1 e8c151e48f5c21228826d4582b2e25c447af7bd9
SHA512 d108a9bfbccc39f976bc51ff302605757c8928b58017072f6c94dd2877984efb8abd23001ec8c3b8ca4c7a6ab7011372774cf0cba0828528062046fc014a4735
SSDEEP 24576:nyLHuEU/Ve5SXJe8qXHgaKpr6gLUIpnK2ljS27vs:yLOgR3fgLPpyU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99c4ba446289edff9894301900fc5bea

File Explorer

99c4ba446289edff9894301900fc5bea

.exe 876KB

99c4ba446289edff9894301900fc5bea

IMPHASH 013c74198fc6e42dcf33737d6c40c012
SHA256 3238be50a645b7049ed3d7ab2b115cfbade1981cde7e4ce7721ed465e8bca4d4
MD5 99c4ba446289edff9894301900fc5bea
SHA1 e8c151e48f5c21228826d4582b2e25c447af7bd9
SHA512 d108a9bfbccc39f976bc51ff302605757c8928b58017072f6c94dd2877984efb8abd23001ec8c3b8ca4c7a6ab7011372774cf0cba0828528062046fc014a4735
SSDEEP 24576:nyLHuEU/Ve5SXJe8qXHgaKpr6gLUIpnK2ljS27vs:yLOgR3fgLPpyU
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wextract.pdb

advapi32

OpenProcessToken GetTokenInformation RegSetValueExA EqualSid RegQueryValueExA LookupPrivilegeValueA RegCreateKeyExA RegOpenKeyExA RegQueryInfoKeyA RegDeleteValueA AllocateAndInitializeSid FreeSid AdjustTokenPrivileges RegCloseKey

kernel32

GetPrivateProfileIntA GetFileAttributesA IsDBCSLeadByte GetSystemDirectoryA GlobalUnlock GetShortPathNameA CreateDirectoryA FindFirstFileA GetLastError GetProcAddress RemoveDirectoryA SetFileAttributesA GlobalFree FindClose GetPrivateProfileStringA LoadLibraryA LocalAlloc WritePrivateProfileStringA GetModuleFileNameA FindNextFileA CompareStringA _lopen CloseHandle LocalFree DeleteFileA ExitProcess DosDateTimeToFileTime CreateFileA FindResourceA SetFilePointer GlobalAlloc ExpandEnvironmentStringsA WaitForSingleObject SetEvent GetModuleHandleW FormatMessageA SetFileTime WriteFile GetDriveTypeA GetVolumeInformationA TerminateThread SizeofResource CreateEventA GetExitCodeProcess CreateProcessA ReadFile SetCurrentDirectoryA _llseek ResetEvent LockResource GetSystemInfo LoadLibraryExA CreateMutexA GetCurrentDirectoryA GetVersionExA GetVersion GetTempPathA CreateThread LocalFileTimeToFileTime Sleep FreeResource GetWindowsDirectoryA lstrcmpA _lclose GlobalLock GetCurrentProcess LoadResource FreeLibrary GetStartupInfoW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess OutputDebugStringA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA GetTempFileNameA

gdi32

GetDeviceCaps

user32

SetForegroundWindow MsgWaitForMultipleObjects SendDlgItemMessageA GetWindowLongPtrA GetWindowRect GetDC MessageBoxA PeekMessageA ReleaseDC GetDlgItem SetWindowPos ShowWindow SetWindowLongPtrA DispatchMessageA SetWindowTextA EnableWindow CallWindowProcA DialogBoxIndirectParamA GetDlgItemTextA LoadStringA MessageBeep CharUpperA CharNextA ExitWindowsEx CharPrevA EndDialog GetDesktopWindow SetDlgItemTextA SendMessageA GetSystemMetrics

msvcrt

?terminate@@YAXXZ _fmode _acmdln __C_specific_handler _initterm __setusermatherr _ismbblead _cexit memset memcpy _exit exit __set_app_type __getmainargs _amsg_exit _XcptFilter _errno _vsnprintf _commode

comctl32

ord17

cabinet

ord22 ord23 ord21 ord20

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

99c4ba446289edff9894301900fc5bea

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

cabinet

version

generic