3b0b3280cc9baf52b92b0e5f53351b78cf01db96c16ed0027e2ec187e2f7250b

Sharing

Copy URL Twitter E-mail

General

Target
3b0b3280cc9baf52b92b0e5f53351b78cf01db96c16ed0027e2ec187e2f7250b
Size 1.7MB
Sample240627-ssaymsxdqe
SHA256 3b0b3280cc9baf52b92b0e5f53351b78cf01db96c16ed0027e2ec187e2f7250b
MD5 d63cfcfc650375004916a45e813c865a
SHA1 78d5c86bebdf90e61a226a7408aff2793bd5544f
SHA512 91bf81670bd100b1653e6a949d041587829a89d65d27b09d33134e7a44747a1ecfed75ad1cc5cd4a243f54bcbe2bb7fe407f4cd4620feae2580cc5c471dbd056
SSDEEP 49152:upZhdgxJtE9el7Jg0fFkQZcPdLS0P4+OFvDEbHGU7PToM4CiiHGP/qvA/:uNbGUlz+0A/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b0b3280cc9baf52b92b0e5f53351b78cf01db96c16ed0027e2ec187e2f7250b

File Explorer

3b0b3280cc9baf52b92b0e5f53351b78cf01db96c16ed0027e2ec187e2f7250b

.exe 1.7MB

3b0b3280cc9baf52b92b0e5f53351b78cf01db96c16ed0027e2ec187e2f7250b

IMPHASH 90f304823cd13bdbf521bc6ab26a8f40
SHA256 3b0b3280cc9baf52b92b0e5f53351b78cf01db96c16ed0027e2ec187e2f7250b
MD5 d63cfcfc650375004916a45e813c865a
SHA1 78d5c86bebdf90e61a226a7408aff2793bd5544f
SHA512 91bf81670bd100b1653e6a949d041587829a89d65d27b09d33134e7a44747a1ecfed75ad1cc5cd4a243f54bcbe2bb7fe407f4cd4620feae2580cc5c471dbd056
SSDEEP 49152:upZhdgxJtE9el7Jg0fFkQZcPdLS0P4+OFvDEbHGU7PToM4CiiHGP/qvA/:uNbGUlz+0A/
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

224730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\buildslave\unity\build\artifacts\UnityCrashHandler\Win32_VS2019_nondev_m_r\UnityCrashHandler32.pdb

user32

EndDialog GetDlgItem SendDlgItemMessageA SetWindowTextW AdjustWindowRect DialogBoxParamA SetWindowPos SendMessageW OffsetRect UnionRect SetForegroundWindow InflateRect GetWindowLongA GetIconInfo LoadImageA CreateIconFromResourceEx LookupIconIdFromDirectoryEx

kernel32

DuplicateHandle VirtualProtect GetVersionExW UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait CreateTimerQueue WriteConsoleW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale HeapFree HeapAlloc FreeLibraryAndExitThread GetConsoleCP GetConsoleMode SetConsoleCtrlHandler GetFileType SetStdHandle GetModuleHandleExW ExitProcess InterlockedFlushSList InterlockedPushEntrySList WaitForSingleObjectEx CloseHandle RaiseException GetLastError GetCurrentThread OpenThread GetThreadTimes EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TryEnterCriticalSection DeleteCriticalSection SwitchToThread CreateThread GetCurrentThreadId SetThreadPriority GetThreadPriority FreeLibrary GetModuleFileNameA GetModuleFileNameW GetProcAddress LoadLibraryA LoadLibraryW MultiByteToWideChar WideCharToMultiByte GetCurrentProcess SuspendThread ResumeThread TlsGetValue TlsSetValue GetThreadContext SetLastError CreateEventW CreateFileW DeleteFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW FlushFileBuffers InterlockedPopEntrySList GetFileAttributesA GetFileAttributesW ReadFile SetFilePointerEx WriteFile GetEnvironmentVariableA GetCurrentDirectoryA OutputDebugStringA GetSystemTime ReadProcessMemory VerSetConditionMask GetSystemTimeAsFileTime GetCurrentProcessId GetModuleHandleW WaitForSingleObject LocalFree FormatMessageW VerifyVersionInfoW CreateToolhelp32Snapshot Thread32First Thread32Next GetStdHandle GetFileSize GetTempPathW SetEvent Sleep TerminateProcess GetExitCodeProcess CreateProcessW GetProcessId GetThreadId OpenProcess CopyFileExW AllocConsole SetErrorMode GetCommandLineW InitializeCriticalSection CreateEventA TerminateThread GetExitCodeThread GetModuleHandleA LoadLibraryExW LoadResource LockResource SizeofResource FindResourceA EnumResourceNamesA GetFileSizeEx IsDebuggerPresent QueryPerformanceCounter QueryPerformanceFrequency ReleaseSemaphore TlsAlloc TlsFree VirtualAlloc VirtualFree VirtualQuery RtlUnwind GetLocaleInfoW LCMapStringW CompareStringW GetTickCount GetCPInfo DecodePointer EncodePointer GetStringTypeW InitializeSListHead GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter QueryDepthSList UnregisterWaitEx IsProcessorFeaturePresent ResetEvent WaitForMultipleObjectsEx

shell32

SHCreateDirectoryExW CommandLineToArgvW

ole32

CoInitializeEx CoTaskMemFree CoCreateGuid

psapi

GetModuleFileNameExW

advapi32

GetUserNameA

wininet

HttpOpenRequestA InternetCloseHandle InternetConnectA HttpQueryInfoA HttpSendRequestA InternetOpenA InternetCrackUrlA

gdi32

GetObjectA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

3b0b3280cc9baf52b92b0e5f53351b78cf01db96c16ed0027e2ec187e2f7250b

user32

kernel32

shell32

ole32

psapi

advapi32

wininet

gdi32

version

generic