aa85bf8f3d9e5ab02b89b75724ef1e62f20352784ab002d9993a8953660cd90a

Sharing

Copy URL Twitter E-mail

General

Target
aa85bf8f3d9e5ab02b89b75724ef1e62f20352784ab002d9993a8953660cd90a
Size 477KB
Sample240404-3vxwasea61
SHA256 aa85bf8f3d9e5ab02b89b75724ef1e62f20352784ab002d9993a8953660cd90a
MD5 2469f684f79627aed0f4e879e9019cee
SHA1 3ba63edab76a9bc376ce1eb9477468ff0ee7511c
SHA512 14ddf1c199886dcd66bee5dd37360a24125a1d8cd71328d8eef05b6932d912b89b210ce0c125700d2482ee01d6303af2e3de0d2f4e99cf32254fc3a638b04aa7
SSDEEP 6144:wt5xoNthj0I2aR1zmYiHXwfSZ4sXAFHhtFo5QNbN:aTst31zji3wlbjNbN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa85bf8f3d9e5ab02b89b75724ef1e62f20352784ab002d9993a8953660cd90a

File Explorer

aa85bf8f3d9e5ab02b89b75724ef1e62f20352784ab002d9993a8953660cd90a

.exe 477KB

aa85bf8f3d9e5ab02b89b75724ef1e62f20352784ab002d9993a8953660cd90a

IMPHASH 08bca23b44274b89c6980b3fd0bc0ab9
SHA256 aa85bf8f3d9e5ab02b89b75724ef1e62f20352784ab002d9993a8953660cd90a
MD5 2469f684f79627aed0f4e879e9019cee
SHA1 3ba63edab76a9bc376ce1eb9477468ff0ee7511c
SHA512 14ddf1c199886dcd66bee5dd37360a24125a1d8cd71328d8eef05b6932d912b89b210ce0c125700d2482ee01d6303af2e3de0d2f4e99cf32254fc3a638b04aa7
SSDEEP 6144:wt5xoNthj0I2aR1zmYiHXwfSZ4sXAFHhtFo5QNbN:aTst31zji3wlbjNbN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

114265

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA GetModuleFileNameA FindNextFileA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection FindFirstFileA ExpandEnvironmentStringsA RemoveDirectoryA GetFileAttributesA DeleteFileA CreateDirectoryA GetFileSize SetFileAttributesA GetShortPathNameA ReadFile GlobalMemoryStatus CreateProcessA GetVersionExA SetEvent OpenEventA WaitForSingleObject MoveFileExA GetDiskFreeSpaceA GetProcAddress LoadLibraryA FreeLibrary LocalFree GetCurrentThread CreateMutexA OpenMutexA InterlockedIncrement InterlockedDecrement GlobalFree GlobalAlloc GetModuleHandleA OutputDebugStringA GetLocalTime CreateEventA GetTempFileNameA FindClose GlobalUnlock GlobalLock ResetEvent CreateThread lstrcmpiA SetEnvironmentVariableA CompareStringW CompareStringA ReleaseSemaphore IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA IsBadWritePtr VirtualAlloc SetEndOfFile SetStdHandle FlushFileBuffers GetOEMCP GetACP GetCPInfo VirtualFree HeapCreate HeapDestroy GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter LCMapStringW LCMapStringA MultiByteToWideChar GetPrivateProfileStringA CopyFileA WriteFile CreateFileA SetFilePointer GetTickCount CloseHandle WritePrivateProfileStringA GetExitCodeProcess GetLastError SetLastError Sleep lstrcatA GetWindowsDirectoryA GetVolumeInformationA lstrlenA lstrcpynA lstrcpyA SearchPathA FormatMessageA GetSystemDirectoryA HeapAlloc GetCurrentThreadId UnmapViewOfFile MapViewOfFile WideCharToMultiByte HeapSize HeapReAlloc GetCurrentProcess TerminateProcess TlsGetValue TlsAlloc TlsSetValue OpenSemaphoreA CreateFileMappingA HeapFree GetFileType ExitProcess GetVersion GetCommandLineA GetStartupInfoA GetSystemTime GetTimeZoneInformation RtlUnwind

advapi32

RegQueryValueExA RegOpenKeyExA RevertToSelf ImpersonateSelf AreAllAccessesGranted GetAclInformation GetAce AllocateAndInitializeSid GetLengthSid InitializeAcl FreeSid InitializeSecurityDescriptor SetSecurityDescriptorDacl RegEnumKeyExA RegQueryInfoKeyA RegEnumValueA RegEnumKeyA RegDeleteKeyA RegDeleteValueA RegCreateKeyExA RegSetValueExA AccessCheck OpenThreadToken RegCloseKey AddAccessAllowedAce

lz32

LZOpenFileA LZClose LZSeek LZRead

ole32

CoCreateGuid

user32

GetClassInfoExA WaitForInputIdle DestroyWindow wsprintfA DispatchMessageA TranslateMessage GetMessageA UpdateWindow SetWindowPos ShowWindow IsWindow CreateWindowExA SetRect GetSystemMetrics SystemParametersInfoA RegisterClassExA LoadCursorA LoadIconA DefWindowProcA SetPropA GetPropA KillTimer SetTimer PostMessageA EnumWindows GetClassNameA GetDesktopWindow MessageBoxA PostQuitMessage SetForegroundWindow PeekMessageA GetCursorPos GetWindowTextA FindWindowA IsWindowVisible

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

wsock32

recv WSACleanup WSAStartup WSACancelAsyncRequest inet_addr WSAAsyncGetHostByName getsockopt __WSAFDIsSet select connect htons ioctlsocket bind inet_ntoa socket closesocket send WSAGetLastError

Sharing

General

Malware Config

Signatures

File Explorer

aa85bf8f3d9e5ab02b89b75724ef1e62f20352784ab002d9993a8953660cd90a

kernel32

advapi32

lz32

ole32

user32

version

wsock32

generic