999cc90337fa0db296a2a0a4a65103800e2dda564af86a9ee7a6ed97bd656d49

Sharing

Copy URL Twitter E-mail

General

Target
999cc90337fa0db296a2a0a4a65103800e2dda564af86a9ee7a6ed97bd656d49
Size 4.8MB
Sample240613-ptscjayfrc
SHA256 999cc90337fa0db296a2a0a4a65103800e2dda564af86a9ee7a6ed97bd656d49
MD5 648c49e27d32c4ae015c079b5dcb457c
SHA1 3dc660e01239ec78e3dc25aaf4776220acb5430b
SHA512 c262cf171674ac39e0160234eaa8906623f71da1b3fd1b8013956a1ad1bbc1b560ea930c2d2ea6e4970f66b1760a192c3af0c5144706200579583da3fd7672de
SSDEEP 98304:HD5e5oIPoY2mNyxZsNJVWGqpEo0bAoFz2gblAbbXGxe6HhI:gjAJmvNJ8Gq6o+AoFz2Ilc5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
999cc90337fa0db296a2a0a4a65103800e2dda564af86a9ee7a6ed97bd656d49

File Explorer

999cc90337fa0db296a2a0a4a65103800e2dda564af86a9ee7a6ed97bd656d49

.exe 4.8MB

999cc90337fa0db296a2a0a4a65103800e2dda564af86a9ee7a6ed97bd656d49

IMPHASH b5d081f9c113dd2210d16da618a7adad
SHA256 999cc90337fa0db296a2a0a4a65103800e2dda564af86a9ee7a6ed97bd656d49
MD5 648c49e27d32c4ae015c079b5dcb457c
SHA1 3dc660e01239ec78e3dc25aaf4776220acb5430b
SHA512 c262cf171674ac39e0160234eaa8906623f71da1b3fd1b8013956a1ad1bbc1b560ea930c2d2ea6e4970f66b1760a192c3af0c5144706200579583da3fd7672de
SSDEEP 98304:HD5e5oIPoY2mNyxZsNJVWGqpEo0bAoFz2gblAbbXGxe6HhI:gjAJmvNJ8Gq6o+AoFz2Ilc5
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

244941

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

H:\Work\2017\rczip\bin\Win32\release\pdb\HaoZip7zSetup.pdb

comctl32

InitCommonControlsEx

shell32

CommandLineToArgvW ShellExecuteW SHGetFileInfoW SHGetPathFromIDListW SHGetMalloc ShellExecuteExW SHBrowseForFolderW

kernel32

HeapAlloc LocalFree GetProcessHeap GetFileAttributesW LoadLibraryW CloseHandle GetProcAddress FreeLibrary GetCurrentProcess GetVersionExW GetModuleHandleW ExpandEnvironmentStringsW InitializeCriticalSectionAndSpinCount WaitForSingleObject CreateProcessW GetModuleFileNameW GetCurrentDirectoryW SetCurrentDirectoryW SetFileApisToOEM SetPriorityClass SetThreadPriority GetEnvironmentVariableW GetCurrentThread GetCommandLineW FindResourceW FindFirstFileW FindNextFileW FindClose GetLongPathNameW CreateFileW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetCurrentThreadId GetCurrentProcessId LoadLibraryExW WriteFile SetFileTime SetEndOfFile FormatMessageW InterlockedExchangeAdd ReadFile SetFilePointer GetFileSize ResumeThread GetACP MultiByteToWideChar WideCharToMultiByte GetLastError GetFullPathNameW lstrlenW RemoveDirectoryW GetTempPathW SetFileAttributesW DeleteFileW GetWindowsDirectoryW MoveFileExW GetTempFileNameW MoveFileW FileTimeToSystemTime CreateEventW SetEvent ResetEvent WaitForMultipleObjects VirtualFree WriteConsoleW DecodePointer FlushFileBuffers VirtualAlloc SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW LCMapStringW HeapFree CreateDirectoryW GetStringTypeW ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead GetStdHandle GetFileType RtlUnwind RaiseException

user32

LoadStringW GetDesktopWindow GetMessageW CreateDialogParamW IsWindowVisible DispatchMessageW SetTimer IsDialogMessageW TranslateMessage LoadIconW KillTimer PostQuitMessage EnableWindow DestroyIcon IsWindow MessageBoxW ShowWindow PostMessageW GetWindowRect SetWindowPos GetSystemMetrics DialogBoxParamW SendMessageW SetWindowTextW SetFocus GetDlgItem ScreenToClient EndDialog GetWindowTextW

gdi32

CreateSolidBrush DeleteObject

ole32

CoCreateInstance CoUninitialize CoInitialize CoInitializeEx

Sharing

General

Malware Config

Signatures

File Explorer

999cc90337fa0db296a2a0a4a65103800e2dda564af86a9ee7a6ed97bd656d49

comctl32

shell32

kernel32

user32

gdi32

ole32

generic