fdcd87b35a5cbf64da91f37e15fb9ceec6147248c4a9f3ae516a17dfce5312f0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
fdcd87b35a5cbf64da91f37e15fb9ceec6147248c4a9f3ae516a17dfce5312f0.zip
Size 6.9MB
Sample240615-c8ry4azgrr
SHA256 fdcd87b35a5cbf64da91f37e15fb9ceec6147248c4a9f3ae516a17dfce5312f0
MD5 0e28a5946a07a383712983752bc271ed
SHA1 70426af95082c75cca38cdd85b729831001a0423
SHA512 bfee219f5d99d741cc63d7abf63e1003d6928fc1527ac11334e09cb7616796a5bb57cb82e15cbf69d386ded1be09eb6d74cb6b0a22372bdc2718210ef49ca12c
SSDEEP 98304:xSGxlaHyBQHtfc0wl3lcb24+8uPjeTioS9DsTnjOJqNAlySrEgXUX+Tmrj4IZtaW:xSMeeQNfc7a24+hj2in9DqwqN81oTKW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe

File Explorer

fdcd87b35a5cbf64da91f37e15fb9ceec6147248c4a9f3ae516a17dfce5312f0.zip

.zip 6.9MB
Setup.exe

.exe 670.0MB

fdcd87b35a5cbf64da91f37e15fb9ceec6147248c4a9f3ae516a17dfce5312f0.zip

SHA256 fdcd87b35a5cbf64da91f37e15fb9ceec6147248c4a9f3ae516a17dfce5312f0
MD5 0e28a5946a07a383712983752bc271ed
SHA1 70426af95082c75cca38cdd85b729831001a0423
SHA512 bfee219f5d99d741cc63d7abf63e1003d6928fc1527ac11334e09cb7616796a5bb57cb82e15cbf69d386ded1be09eb6d74cb6b0a22372bdc2718210ef49ca12c
SSDEEP 98304:xSGxlaHyBQHtfc0wl3lcb24+8uPjeTioS9DsTnjOJqNAlySrEgXUX+Tmrj4IZtaW:xSMeeQNfc7a24+hj2in9DqwqN81oTKW
MD5 SHA1 SHA512 SSDEEP

Setup.exe

IMPHASH 456f5dc857fd9c962b120664c3b76293
SHA256 df0927eb284b3604c55cbf9ef4b0b2420a5618c555529b6bbda043266732e557
MD5 87a968fd102e53e6ac4f678213405b56
SHA1 057a94d37389e111bf384306d64186c18e9e090d
SHA512 4036f7719132e68332e3bf6f81dce3c8643e3c83dd8503cdd5897a1fdac36a8d338db7b45e244533687fc982f440d421bafad1d9f1120158df04d65d6f8da3fe
SSDEEP 98304:YZL8H6pQ7tD26q13x85KW+y07jEBiacFRutfxgBAXK34iFGCXEd+JebL4MtnaTn:Yy2QpD2VoKW+FjeiBFRo0AXulMxor
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14433

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHBrowseForFolderW SHFileOperationW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

PeekMessageW DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW SetDlgItemTextW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

GetDeviceCaps SetBkColor CreateBrushIndirect SetTextColor SetBkMode SelectObject DeleteObject CreateFontIndirectW

kernel32

GetLastError WaitForSingleObject GetExitCodeProcess RemoveDirectoryW GetTempFileNameW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode GetTempPathW CreateProcessW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW WriteFile GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetEnvironmentVariableW