5ad92fc502ca79b8c9b280e562b5c4d85881a95325f5b84849ddb5cda5824c70

Sharing

Copy URL Twitter E-mail

General

Target
5ad92fc502ca79b8c9b280e562b5c4d85881a95325f5b84849ddb5cda5824c70
Size 393KB
Sample240612-fblycs1dmr
SHA256 5ad92fc502ca79b8c9b280e562b5c4d85881a95325f5b84849ddb5cda5824c70
MD5 21e5b6484673d6410ada678665a1d3e1
SHA1 e9a835bce19f59698a7e3dacf42c291e048ed43e
SHA512 500849296cd417230e2c1120b392299f77fc69b4653674a8d96d5a44a3090e32e54c9592e3c6f304ce952770d144686e56a81ce8395ac1cb2e0255fb43d30b73
SSDEEP 6144:4qm3Yb62eumrhsr3viTuwAwL2FycjcjGHpDSODKJp5v:s3SsrEiqwAwLemGJDSMS5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ad92fc502ca79b8c9b280e562b5c4d85881a95325f5b84849ddb5cda5824c70

File Explorer

5ad92fc502ca79b8c9b280e562b5c4d85881a95325f5b84849ddb5cda5824c70

.exe 393KB

5ad92fc502ca79b8c9b280e562b5c4d85881a95325f5b84849ddb5cda5824c70

IMPHASH 63abd0043fd726dc25488368ee6d857f
SHA256 5ad92fc502ca79b8c9b280e562b5c4d85881a95325f5b84849ddb5cda5824c70
MD5 21e5b6484673d6410ada678665a1d3e1
SHA1 e9a835bce19f59698a7e3dacf42c291e048ed43e
SHA512 500849296cd417230e2c1120b392299f77fc69b4653674a8d96d5a44a3090e32e54c9592e3c6f304ce952770d144686e56a81ce8395ac1cb2e0255fb43d30b73
SSDEEP 6144:4qm3Yb62eumrhsr3viTuwAwL2FycjcjGHpDSODKJp5v:s3SsrEiqwAwLemGJDSMS5
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

94576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\srv\slave\workdir\repos\opera1\chromium\src\out\Release\installer_helper\installer_helper.exe.pdb

shell32

SHBindToParent SHParseDisplayName

user32

CreatePopupMenu CreateWindowExW DefWindowProcW DestroyMenu DestroyWindow DispatchMessageW GetMenuItemCount GetMenuItemInfoW GetMessageW LoadCursorW LoadStringW PostMessageW PostQuitMessage RegisterClassW SetTimer TranslateMessage

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringW CreateEventW CreateFileW DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW MultiByteToWideChar QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent RtlUnwind SetEnvironmentVariableW SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObjectEx WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

ole32

CoInitialize CoTaskMemFree CoUninitialize

advapi32

SystemFunction036

Name

.text

Size

305KB

Virtual Size

305KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

149B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

848B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5ad92fc502ca79b8c9b280e562b5c4d85881a95325f5b84849ddb5cda5824c70

shell32

user32

kernel32

ole32

advapi32

generic