03a0f1b34e5688e65e394ac4e242b5e287817afd351d973bcb495d533166568e[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
03a0f1b34e5688e65e394ac4e242b5e287817afd351d973bcb495d533166568e.zip
Size 7.0MB
Sample240615-nb6a1aybph
SHA256 03a0f1b34e5688e65e394ac4e242b5e287817afd351d973bcb495d533166568e
MD5 6e621a2773322cd17fe32c181d062d49
SHA1 a238afd8addc7751d0bd47412b2827f9ae6a01cc
SHA512 69d76848c7d3dd591009cdbd625da606eab50eeddbd3ebe3a3d5d9d2427f25b177c07a763e22c1870800fb7a841a4abe844a2bdf7b37efdcbf42fe5ba7b9bd23
SSDEEP 196608:yvgKLAm5iWdSbkWNjpB0Z+hKjNRD/0RGzrsZCP9F4WgqvC2q:y7CIqjpBS+hKRuZCPL4rqvC2q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup (6).exe

File Explorer

03a0f1b34e5688e65e394ac4e242b5e287817afd351d973bcb495d533166568e.zip

.zip 7.0MB
Setup (6).exe

.exe 689.0MB

03a0f1b34e5688e65e394ac4e242b5e287817afd351d973bcb495d533166568e.zip

SHA256 03a0f1b34e5688e65e394ac4e242b5e287817afd351d973bcb495d533166568e
MD5 6e621a2773322cd17fe32c181d062d49
SHA1 a238afd8addc7751d0bd47412b2827f9ae6a01cc
SHA512 69d76848c7d3dd591009cdbd625da606eab50eeddbd3ebe3a3d5d9d2427f25b177c07a763e22c1870800fb7a841a4abe844a2bdf7b37efdcbf42fe5ba7b9bd23
SSDEEP 196608:yvgKLAm5iWdSbkWNjpB0Z+hKjNRD/0RGzrsZCP9F4WgqvC2q:y7CIqjpBS+hKRuZCPL4rqvC2q
MD5 SHA1 SHA512 SSDEEP

Setup (6).exe

IMPHASH 456f5dc857fd9c962b120664c3b76293
SHA256 2ccd9c21535699c0bfe986739ad48e88b2c4b51b9f571dcad6214742adf48d23
MD5 ff67f19d6adda7d98103d92e733bc89e
SHA1 a0bbc5d62f72ed69ca3ee5ca20497714f369f435
SHA512 d69371bcc0a9bd65425826ddd9b5c509ec3f2b5493174316e4780b1e58a2366257b92d185b26a527d5b8f10ea2c49c1d95c835486cc6f9aeeab8258cae234523
SSDEEP 196608:9gViopMudQjEGr5TlS7ybinhHzbWF6zr4ZKPLLUGgGn4:SKAg5TlkybihGZKPfU7Gn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14441

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHBrowseForFolderW SHFileOperationW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

PeekMessageW DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW SetDlgItemTextW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

GetDeviceCaps SetBkColor CreateBrushIndirect SetTextColor SetBkMode SelectObject DeleteObject CreateFontIndirectW

kernel32

GetLastError WaitForSingleObject GetExitCodeProcess RemoveDirectoryW GetTempFileNameW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode GetTempPathW CreateProcessW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW WriteFile GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetEnvironmentVariableW