ece3ea9e88d7d918cc8b0c53d826b24aca93c642819607d5a3be46f9634b070a

General

Target
ece3ea9e88d7d918cc8b0c53d826b24aca93c642819607d5a3be46f9634b070a
Size 176KB
Sample240610-xtkxfsxdnr
SHA256 ece3ea9e88d7d918cc8b0c53d826b24aca93c642819607d5a3be46f9634b070a
MD5 de79a6122c9aa91ab060205f80b8e4d0
SHA1 17e4987cbe9d96a44b7a3e771d9e30b64675dcc6
SHA512 ac87e1618c80f0b4c1dcaf27163d22f0bba6b0d4b55da01e2b5b7d59e0d4ec4288d7985514e999852c148679ec9ecb56b6ab78b97feedefd887a37bad3b36e05
SSDEEP 3072:VE7RKgUuGN9ylMST2Y+r0Q6/x4kLG9SJmiJ3kp/u684OHqQtnX:VE7mN9woVoxHiUUiNOu684OHqQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ece3ea9e88d7d918cc8b0c53d826b24aca93c642819607d5a3be46f9634b070a

File Explorer

ece3ea9e88d7d918cc8b0c53d826b24aca93c642819607d5a3be46f9634b070a

.exe 176KB

ece3ea9e88d7d918cc8b0c53d826b24aca93c642819607d5a3be46f9634b070a

IMPHASH 8d78ad73b922b1fcb673f585396f35b1
SHA256 ece3ea9e88d7d918cc8b0c53d826b24aca93c642819607d5a3be46f9634b070a
MD5 de79a6122c9aa91ab060205f80b8e4d0
SHA1 17e4987cbe9d96a44b7a3e771d9e30b64675dcc6
SHA512 ac87e1618c80f0b4c1dcaf27163d22f0bba6b0d4b55da01e2b5b7d59e0d4ec4288d7985514e999852c148679ec9ecb56b6ab78b97feedefd887a37bad3b36e05
SSDEEP 3072:VE7RKgUuGN9ylMST2Y+r0Q6/x4kLG9SJmiJ3kp/u684OHqQtnX:VE7mN9woVoxHiUUiNOu684OHqQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\ac3filter\work\ac3filter\tools\ac3config\Release\ac3config.pdb

kernel32

FlushFileBuffers CloseHandle CreateFileA ReadFile GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc RaiseException GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

user32

FindWindowA PostMessageA MessageBoxA

advapi32

RegOpenKeyExA RegQueryValueExA RegSetValueExA RegCloseKey

ole32

CoTaskMemFree CoUninitialize CoInitialize CoCreateInstance

oleaut32

OleCreatePropertyFrame

Sharing

General

Malware Config

Signatures

File Explorer

ece3ea9e88d7d918cc8b0c53d826b24aca93c642819607d5a3be46f9634b070a

kernel32

user32

advapi32

ole32

oleaut32

generic