de8e9ef09c737a05993bddcfdd811996

Sharing

Copy URL Twitter E-mail

General

Target
de8e9ef09c737a05993bddcfdd811996
Size 275KB
Sample240325-v2byeaea96
SHA256 60b2be4c0aa047e97da31f309b97184a42beb95e96f338a433d4b5dea789ee51
MD5 de8e9ef09c737a05993bddcfdd811996
SHA1 4bff8aa405182e518885012a6fbf00b48653c451
SHA512 3aa17fa40f402c7a67d6a9e42b9af4dd89d01f0988df42d660c1b960cd874518a3ff531cc1da52445e18efad768adb3c89fd1843704dee461224b9828abc9ba7
SSDEEP 6144:IyZcAuFcCf38XolyxnDFJ6VEohCBVHzyvqs1yg2FYJ75laG:BTOcCf6yFwBByvpyg2F+B
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de8e9ef09c737a05993bddcfdd811996

File Explorer

de8e9ef09c737a05993bddcfdd811996

.exe 275KB

de8e9ef09c737a05993bddcfdd811996

IMPHASH c769210c368165fcb9c03d3f832f55eb
SHA256 60b2be4c0aa047e97da31f309b97184a42beb95e96f338a433d4b5dea789ee51
MD5 de8e9ef09c737a05993bddcfdd811996
SHA1 4bff8aa405182e518885012a6fbf00b48653c451
SHA512 3aa17fa40f402c7a67d6a9e42b9af4dd89d01f0988df42d660c1b960cd874518a3ff531cc1da52445e18efad768adb3c89fd1843704dee461224b9828abc9ba7
SSDEEP 6144:IyZcAuFcCf38XolyxnDFJ6VEohCBVHzyvqs1yg2FYJ75laG:BTOcCf6yFwBByvpyg2F+B
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

74191

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

shell32

SHGetSpecialFolderPathW ShellExecuteExW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW

gdi32

CreateFontIndirectW DeleteObject GetDeviceCaps GetObjectW CreateCompatibleDC SelectObject CreateCompatibleBitmap SetStretchBltMode DeleteDC GetCurrentObject StretchBlt

user32

GetWindowRect ScreenToClient CreateWindowExW GetWindowTextW GetMessageW GetParent KillTimer DestroyWindow CharUpperW EndDialog SendMessageW wsprintfW CopyImage ReleaseDC GetWindowDC SetWindowPos GetMenu GetWindowLongW DispatchMessageW GetWindowTextLengthW GetSysColor SetWindowTextW MessageBoxA wsprintfA GetKeyState GetDlgItem GetClientRect GetSystemMetrics SetWindowLongW SetFocus SystemParametersInfoW ShowWindow DrawTextW GetDC ClientToScreen GetWindow DialogBoxIndirectParamW DrawIconEx CallWindowProcW DefWindowProcW IsWindow wvsprintfW LoadImageW LoadIconW MessageBeep EnableWindow EnableMenuItem GetSystemMenu GetClassNameA SetTimer

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

SysAllocString VariantClear OleLoadPicture

kernel32

SetEndOfFile EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection GetModuleHandleA SetFileTime ReadFile SetFilePointer GetFileSize GetSystemDirectoryW FormatMessageW lstrcpyW LocalFree IsBadReadPtr SuspendThread ResumeThread TerminateThread InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetCommandLineW GetModuleFileNameW SetCurrentDirectoryW GetDriveTypeW CreateFileW CloseHandle SetEnvironmentVariableW GetTempPathW lstrlenW GetSystemTimeAsFileTime CompareFileTime SetThreadLocale FindFirstFileW DeleteFileW FindNextFileW FindClose RemoveDirectoryW ExpandEnvironmentStringsW WideCharToMultiByte VirtualAlloc GlobalMemoryStatusEx lstrcmpW GetEnvironmentVariableW lstrcmpiW lstrlenA GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource LoadLibraryA GetProcAddress GetModuleHandleW VirtualFree GetStdHandle ExitProcess lstrcatW GetDiskFreeSpaceExW SetFileAttributesW SetLastError Sleep GetExitCodeThread WaitForSingleObject CreateThread GetLastError SystemTimeToFileTime GetLocalTime GetFileAttributesW CreateDirectoryW WriteFile GetStartupInfoA

msvcrt

??2@YAPAXI@Z _purecall memcmp free memcpy _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit _CxxThrowException _beginthreadex _EH_prolog ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z memset _wcsnicmp strncmp malloc memmove _wtol ??3@YAXPAX@Z

Sharing

General

Malware Config

Signatures

File Explorer

de8e9ef09c737a05993bddcfdd811996

comctl32

shell32

gdi32

user32

ole32

oleaut32

kernel32

msvcrt

generic