104141ea53584cb66cf37a86d6adc3ecf78d512297cf0de4943fb641a37365be

Sharing

Copy URL Twitter E-mail

General

Target

104141ea53584cb66cf37a86d6adc3ecf78d512297cf0de4943fb641a37365be
Size

1.4MB
MD5

455c54d026b438c0a6d1f30d29349763
SHA1

5f288a3421099889a8c26003b376a61321b3add7
SHA256

104141ea53584cb66cf37a86d6adc3ecf78d512297cf0de4943fb641a37365be
SHA512

74e5efdb42420a5f8ca0f1507dbfef92a56c16f135d52a25177472d141b82f707286e94c1a6bc23ffa249d956485176b112fbe46f5669e5dedb71e534343bad0
SSDEEP

24576:JGD0oLazw4QCAii5llXmsRCaEzwAyujOhcid/RrmpF:JGD0oLazw4Qni2llWsRCaEucW/Rrmp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104141ea53584cb66cf37a86d6adc3ecf78d512297cf0de4943fb641a37365be

Files

104141ea53584cb66cf37a86d6adc3ecf78d512297cf0de4943fb641a37365be
.exe windows:6 windows x64 arch:x64

ce143901a9f45c114376695e3aea01cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

G:\devops-filmora-agent\workspace\p-e5efa306f5d34fa4ab8592037c316151\src\20230911163639\Bin\x64\Release\Wondershare Filmora Launcher.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

shlwapi

PathFileExistsW

kernel32

ReadConsoleW
FindFirstFileW
FreeResource
FindResourceW
LoadResource
SizeofResource
GetModuleFileNameW
lstrlenW
LockResource
CreateDirectoryW
GetTempPathW
GetLastError
CreateSemaphoreW
GetCurrentThreadId
CloseHandle
MoveFileExW
SetStdHandle
GetPrivateProfileStringW
QueryFullProcessImageNameW
K32GetModuleFileNameExW
OpenProcess
LoadLibraryW
Sleep
GetExitCodeProcess
WritePrivateProfileSectionW
WritePrivateProfileStringW
GetPrivateProfileIntW
OpenMutexW
GetProcAddress
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetCurrentProcessId
WriteConsoleW
CreateFileW
SetEndOfFile
WaitForSingleObject
GetCPInfo
OutputDebugStringW
LoadLibraryExW
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
HeapFree
HeapAlloc
FindFirstFileExW
FindNextFileW
RemoveDirectoryW
DeleteFileW
FindClose
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetCommandLineW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetStdHandle
GetFileType
GetProcessHeap
ExitProcess
GetModuleHandleExW
WriteFile
ReadFile
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
GetTimeZoneInformation
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

shell32

ord680
ShellExecuteW
ShellExecuteExW

Sections

.text
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 383KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ce143901a9f45c114376695e3aea01cf

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

shlwapi

kernel32

advapi32

shell32

Sections

.text Size: 329KB - Virtual size: 328KB

.rdata Size: 98KB - Virtual size: 97KB

.data Size: 11KB - Virtual size: 22KB

.pdata Size: 12KB - Virtual size: 12KB

.rsrc Size: 383KB - Virtual size: 382KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 329KB - Virtual size: 328KB

.rdata
Size: 98KB - Virtual size: 97KB

.data
Size: 11KB - Virtual size: 22KB

.pdata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 383KB - Virtual size: 382KB

.reloc
Size: 568KB - Virtual size: 572KB