05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165

Sharing

Copy URL Twitter E-mail

General

Target
05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165
Size 479KB
Sample240404-172nxabe4t
SHA256 05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165
MD5 08e5f1243ad4970745975b27b6e2f9fa
SHA1 83b1a8939bd4e2ea5677d8742edd1a697edd196b
SHA512 d01f83c4c35e6049544d71037b3d8db29cf177e232839c684e2943899e7e891d0e30d996ddb0af58f760ac34dd8fc6acee7338b52b3fda5f17c892f7498d2280
SSDEEP 12288:/rrb2iDiSOv4VBHMQhPDmqTCYw4oUGbjnm:/7DB/DDm1YANPnm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165

File Explorer

05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165

.exe 479KB

05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165

IMPHASH 1691b1f290a2ca836b091bdcee4ba1dd
SHA256 05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165
MD5 08e5f1243ad4970745975b27b6e2f9fa
SHA1 83b1a8939bd4e2ea5677d8742edd1a697edd196b
SHA512 d01f83c4c35e6049544d71037b3d8db29cf177e232839c684e2943899e7e891d0e30d996ddb0af58f760ac34dd8fc6acee7338b52b3fda5f17c892f7498d2280
SSDEEP 12288:/rrb2iDiSOv4VBHMQhPDmqTCYw4oUGbjnm:/7DB/DDm1YANPnm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

157522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCreate GetModuleHandleA CreateEventA WaitForSingleObject CloseHandle HeapDestroy GetModuleFileNameW lstrlenW HeapFree HeapAlloc MulDiv GetProcessHeap GetStartupInfoA

user32

DestroyCursor EndMenu DispatchMessageW BeginPaint GetClientRect IsIconic DrawMenuBar CreateWindowExW GetClassInfoExW ShowCaret DefMDIChildProcW InsertMenuW CreateIcon MsgWaitForMultipleObjectsEx GetSystemMenu LoadStringW EndPaint LoadBitmapW GetScrollPos CharUpperBuffW LoadCursorW DefFrameProcW GetDlgCtrlID GetClassInfoW DrawFocusRect SetScrollPos RegisterClassW IsDialogMessageW CopyImage GetScrollRange SetTimer GetCursor KillTimer FillRect DeleteMenu DestroyMenu GetDCEx FrameRect GetWindowTextW ReleaseDC PeekMessageW ShowWindow GetMenuStringW DrawIcon SetMenuItemInfoW DestroyWindow GetScrollInfo DestroyIcon CreateMenu LoadIconW PostMessageW CreateAcceleratorTableW EnableWindow GetMenuItemInfoW IsZoomed

gdi32

SetBkMode CreateCompatibleBitmap AngleArc StretchBlt CreatePalette PolyBezierTo MoveToEx RectVisible SetRectRgn GetEnhMetaFileHeader GetStockObject SetTextColor RoundRect GetWindowOrgEx CreateICW CreateSolidBrush RestoreDC Polygon CreateDCW GetTextMetricsW Pie SetAbortProc

ole32

OleUninitialize OleInitialize CoTaskMemFree IsEqualGUID CoTaskMemAlloc CoUninitialize CoCreateInstance CoInitialize

oleaut32

VariantClear SysAllocStringLen SafeArrayGetLBound SysReAllocStringLen SafeArrayCreate VariantInit VariantChangeType SafeArrayPutElement SafeArrayPtrOfIndex VariantCopyInd SafeArrayUnaccessData VariantCopy SafeArrayAccessData SafeArrayGetUBound SysFreeString SafeArrayGetElement GetErrorInfo

msvcrt

_initterm __getmainargs _acmdln exit _XcptFilter _exit memcpy qsort wcsrchr memset wcschr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp __setusermatherr

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

Name

.text

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

323KB

Virtual Size

323KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165

kernel32

user32

gdi32

ole32

oleaut32

msvcrt

version

generic