da16ba068bb93502c3a3e524d4cfd041

Sharing

Copy URL Twitter E-mail

General

Target
da16ba068bb93502c3a3e524d4cfd041
Size 876KB
Sample240320-3be65sdg64
SHA256 501e91b9bac974282cf4fb0907c1b9c73f272cb1dd90554ecdaf02940bc6647a
MD5 da16ba068bb93502c3a3e524d4cfd041
SHA1 1314f1c194f21b1086e8520deffd657fde82e7a0
SHA512 ca6e2b92af65b8292efc0b5ac812c6c0efee2f23d3adc03c6a67beeda200ca377ac83b6dbf588e1548c23c90cdfe864c90a51782ecec594c129662c518995e36
SSDEEP 24576:nyLHuEU/Ve5SXJe8qXHgaKpr6gLUIpnK2ljS27vs:yLOgR3fgLPpyU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da16ba068bb93502c3a3e524d4cfd041

File Explorer

da16ba068bb93502c3a3e524d4cfd041

.exe 876KB

da16ba068bb93502c3a3e524d4cfd041

IMPHASH 013c74198fc6e42dcf33737d6c40c012
SHA256 501e91b9bac974282cf4fb0907c1b9c73f272cb1dd90554ecdaf02940bc6647a
MD5 da16ba068bb93502c3a3e524d4cfd041
SHA1 1314f1c194f21b1086e8520deffd657fde82e7a0
SHA512 ca6e2b92af65b8292efc0b5ac812c6c0efee2f23d3adc03c6a67beeda200ca377ac83b6dbf588e1548c23c90cdfe864c90a51782ecec594c129662c518995e36
SSDEEP 24576:nyLHuEU/Ve5SXJe8qXHgaKpr6gLUIpnK2ljS27vs:yLOgR3fgLPpyU
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wextract.pdb

advapi32

OpenProcessToken GetTokenInformation RegSetValueExA EqualSid RegQueryValueExA LookupPrivilegeValueA RegCreateKeyExA RegOpenKeyExA RegQueryInfoKeyA RegDeleteValueA AllocateAndInitializeSid FreeSid AdjustTokenPrivileges RegCloseKey

kernel32

GetPrivateProfileIntA GetFileAttributesA IsDBCSLeadByte GetSystemDirectoryA GlobalUnlock GetShortPathNameA CreateDirectoryA FindFirstFileA GetLastError GetProcAddress RemoveDirectoryA SetFileAttributesA GlobalFree FindClose GetPrivateProfileStringA LoadLibraryA LocalAlloc WritePrivateProfileStringA GetModuleFileNameA FindNextFileA CompareStringA _lopen CloseHandle LocalFree DeleteFileA ExitProcess DosDateTimeToFileTime CreateFileA FindResourceA SetFilePointer GlobalAlloc ExpandEnvironmentStringsA WaitForSingleObject SetEvent GetModuleHandleW FormatMessageA SetFileTime WriteFile GetDriveTypeA GetVolumeInformationA TerminateThread SizeofResource CreateEventA GetExitCodeProcess CreateProcessA ReadFile SetCurrentDirectoryA _llseek ResetEvent LockResource GetSystemInfo LoadLibraryExA CreateMutexA GetCurrentDirectoryA GetVersionExA GetVersion GetTempPathA CreateThread LocalFileTimeToFileTime Sleep FreeResource GetWindowsDirectoryA lstrcmpA _lclose GlobalLock GetCurrentProcess LoadResource FreeLibrary GetStartupInfoW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess OutputDebugStringA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA GetTempFileNameA

gdi32

GetDeviceCaps

user32

SetForegroundWindow MsgWaitForMultipleObjects SendDlgItemMessageA GetWindowLongPtrA GetWindowRect GetDC MessageBoxA PeekMessageA ReleaseDC GetDlgItem SetWindowPos ShowWindow SetWindowLongPtrA DispatchMessageA SetWindowTextA EnableWindow CallWindowProcA DialogBoxIndirectParamA GetDlgItemTextA LoadStringA MessageBeep CharUpperA CharNextA ExitWindowsEx CharPrevA EndDialog GetDesktopWindow SetDlgItemTextA SendMessageA GetSystemMetrics

msvcrt

?terminate@@YAXXZ _fmode _acmdln __C_specific_handler _initterm __setusermatherr _ismbblead _cexit memset memcpy _exit exit __set_app_type __getmainargs _amsg_exit _XcptFilter _errno _vsnprintf _commode

comctl32

ord17

cabinet

ord22 ord23 ord21 ord20

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

da16ba068bb93502c3a3e524d4cfd041

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

cabinet

version

generic