40331d6e3d18c61d5591aa85fc455f6674e78924ce4660ce18221aa49f696779[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
40331d6e3d18c61d5591aa85fc455f6674e78924ce4660ce18221aa49f696779.exe
Size 3.1MB
Sample240612-v91lqsxdpp
SHA256 40331d6e3d18c61d5591aa85fc455f6674e78924ce4660ce18221aa49f696779
MD5 2f03ead3988fc2b5e16470ed0a96557d
SHA1 4d0dcb7ebb340af8887fdec5f665eb091db9caf6
SHA512 799830b418d6bf37a4d7bcd9649ee6d2f0551101029fecb5e44e8115fd7e29daabd8e662e316565bd6e1e36aaf9c26a82c49c7bd65e7eb28a73e9c3930c90ca6
SSDEEP 49152:ByTeFwtj0HLirwzPPk/iZuKsZxof6SD3nlOyT3Pwsu8/Cf6PyBXEjk1:ByVEer3/iQZxofZXlOaN/Cf66NEa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40331d6e3d18c61d5591aa85fc455f6674e78924ce4660ce18221aa49f696779.exe

File Explorer

40331d6e3d18c61d5591aa85fc455f6674e78924ce4660ce18221aa49f696779.exe

.exe 3.1MB

40331d6e3d18c61d5591aa85fc455f6674e78924ce4660ce18221aa49f696779.exe

IMPHASH eec4c9510d1f15621b464022e8c2d408
SHA256 40331d6e3d18c61d5591aa85fc455f6674e78924ce4660ce18221aa49f696779
MD5 2f03ead3988fc2b5e16470ed0a96557d
SHA1 4d0dcb7ebb340af8887fdec5f665eb091db9caf6
SHA512 799830b418d6bf37a4d7bcd9649ee6d2f0551101029fecb5e44e8115fd7e29daabd8e662e316565bd6e1e36aaf9c26a82c49c7bd65e7eb28a73e9c3930c90ca6
SSDEEP 49152:ByTeFwtj0HLirwzPPk/iZuKsZxof6SD3nlOyT3Pwsu8/Cf6PyBXEjk1:ByVEer3/iQZxofZXlOaN/Cf66NEa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

243441

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

H:\Work\haozip\bin\Win32\release\pdb\HaoZip7zSetup.pdb

comctl32

InitCommonControlsEx

shell32

SHBrowseForFolderW SHGetFileInfoW SHGetPathFromIDListW SHGetMalloc ShellExecuteExW ShellExecuteW CommandLineToArgvW

kernel32

HeapAlloc LocalFree GetProcessHeap GetFileAttributesW LoadLibraryW CloseHandle GetProcAddress FreeLibrary GetCurrentProcess GetVersionExW GetModuleHandleW ExpandEnvironmentStringsW InitializeCriticalSectionAndSpinCount WaitForSingleObject CreateProcessW GetModuleFileNameW GetCurrentDirectoryW SetCurrentDirectoryW SetFileApisToOEM SetPriorityClass SetThreadPriority GetEnvironmentVariableW GetCurrentThread GetCommandLineW FindResourceW FindFirstFileW FindNextFileW FindClose GetLongPathNameW CreateFileW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetCurrentThreadId LoadLibraryExW WriteFile SetFileTime SetEndOfFile FormatMessageW InterlockedExchangeAdd ReadFile SetFilePointer GetFileSize ResumeThread GetACP GetLastError WideCharToMultiByte CreateDirectoryW GetFullPathNameW lstrlenW RemoveDirectoryW GetTempPathW SetFileAttributesW DeleteFileW GetWindowsDirectoryW MoveFileExW GetTempFileNameW MoveFileW CreateEventW SetEvent ResetEvent WaitForMultipleObjects GetCurrentProcessId FileTimeToSystemTime WriteConsoleW DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW LCMapStringW HeapFree MultiByteToWideChar VirtualFree VirtualAlloc GetStringTypeW ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead GetStdHandle GetFileType RtlUnwind RaiseException SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree

user32

DispatchMessageW SetTimer IsDialogMessageW TranslateMessage LoadIconW KillTimer PostQuitMessage EnableWindow ScreenToClient IsWindow MessageBoxW ShowWindow PostMessageW GetWindowRect SetWindowPos DialogBoxParamW SendMessageW EndDialog SetWindowTextW SetFocus GetDlgItem GetWindowTextW IsWindowVisible CreateDialogParamW GetMessageW GetDesktopWindow LoadStringW DestroyIcon GetSystemMetrics

gdi32

CreateSolidBrush DeleteObject

ole32

CoCreateInstance CoInitializeEx CoUninitialize CoInitialize