b7616061486ad6138b09600ea4d9fe8636c10eef59bd15d61291d81765517290

Sharing

Copy URL Twitter E-mail

General

Target
b7616061486ad6138b09600ea4d9fe8636c10eef59bd15d61291d81765517290
Size 78KB
Sample240609-ja71zsgc95
SHA256 b7616061486ad6138b09600ea4d9fe8636c10eef59bd15d61291d81765517290
MD5 66eff393c8c50792c51527df4aa7c265
SHA1 de0b864e3e210dd12cc156f9c4d64dc1901ba338
SHA512 6bf323641e325c04c186ac946a4e8a0b4797d61dbe062676ef1ed89cb9fdd1051ddb2e4784800de3358e16329b852abcbf4c05683a5571dd5a5ff3290eb859d2
SSDEEP 768:vCru/f9Iw/E6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRiTWNReOOnCru/fo:71Tzy48untU8fOMEI3jyYfPiuODo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7616061486ad6138b09600ea4d9fe8636c10eef59bd15d61291d81765517290

File Explorer

b7616061486ad6138b09600ea4d9fe8636c10eef59bd15d61291d81765517290

.exe .vbs 78KB

b7616061486ad6138b09600ea4d9fe8636c10eef59bd15d61291d81765517290

IMPHASH 0818438d729451edf8c455424695687b
SHA256 b7616061486ad6138b09600ea4d9fe8636c10eef59bd15d61291d81765517290
MD5 66eff393c8c50792c51527df4aa7c265
SHA1 de0b864e3e210dd12cc156f9c4d64dc1901ba338
SHA512 6bf323641e325c04c186ac946a4e8a0b4797d61dbe062676ef1ed89cb9fdd1051ddb2e4784800de3358e16329b852abcbf4c05683a5571dd5a5ff3290eb859d2
SSDEEP 768:vCru/f9Iw/E6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRiTWNReOOnCru/fo:71Tzy48untU8fOMEI3jyYfPiuODo
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset strncmp memmove strncpy _strnicmp strlen strcmp strcpy strcat sprintf fabs ceil malloc floor free fclose memcpy _stricmp tolower

kernel32

GetModuleHandleA HeapCreate GetCommandLineA RemoveDirectoryA GetTempFileNameA GetShortPathNameA HeapDestroy ExitProcess FindResourceA LoadResource SizeofResource HeapAlloc HeapFree Sleep LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetCurrentProcessId CloseHandle InitializeCriticalSection GetModuleFileNameA GetEnvironmentVariableA SetEnvironmentVariableA GetCurrentProcess DuplicateHandle CreatePipe GetStdHandle CreateProcessA WaitForSingleObject EnterCriticalSection LeaveCriticalSection PeekNamedPipe GetExitCodeProcess TerminateProcess SetUnhandledExceptionFilter GetVersionExA HeapReAlloc SetLastError TlsAlloc GetCurrentDirectoryA SetCurrentDirectoryA GetTempPathA SetFileAttributesA DeleteFileA CreateDirectoryA WriteFile CreateFileA SetFilePointer ReadFile DeleteCriticalSection

user32

MessageBoxA SendMessageA PostMessageA GetWindowThreadProcessId IsWindowVisible GetWindowLongA GetForegroundWindow IsWindowEnabled EnableWindow EnumWindows SetWindowPos DestroyWindow GetDC GetWindowTextLengthA GetWindowTextA SetRect DrawTextA GetSystemMetrics ReleaseDC GetSysColor GetSysColorBrush CreateWindowExA CallWindowProcA SetWindowLongA SetFocus RedrawWindow RemovePropA DefWindowProcA SetPropA GetParent GetPropA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRectEx ShowWindow CreateAcceleratorTableA PeekMessageA MsgWaitForMultipleObjects GetMessageA GetActiveWindow TranslateAcceleratorA TranslateMessage DispatchMessageA GetFocus GetClientRect FillRect EnumChildWindows DefFrameProcA GetWindowRect IsChild GetClassNameA GetKeyState DestroyIcon RegisterWindowMessageA

gdi32

GetStockObject SelectObject SetBkColor SetTextColor GetTextExtentPoint32A CreateSolidBrush DeleteObject GetObjectA CreateCompatibleDC GetDIBits DeleteDC GetObjectType CreateDIBSection BitBlt CreateBitmap SetPixel

comctl32

InitCommonControlsEx

ole32

CoInitialize CoTaskMemFree RevokeDragDrop

shell32

ShellExecuteExA

winmm

timeBeginPeriod

shlwapi

PathRemoveArgsA PathGetArgsA PathAddBackslashA PathQuoteSpacesA

Sharing

General

Malware Config

Signatures

File Explorer

b7616061486ad6138b09600ea4d9fe8636c10eef59bd15d61291d81765517290

msvcrt

kernel32

user32

gdi32

comctl32

ole32

shell32

winmm

shlwapi

generic