a1e1c8b1ab924aeb83526f74499d179cc88eb50283f96bb557f8a56d69c16a61[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a1e1c8b1ab924aeb83526f74499d179cc88eb50283f96bb557f8a56d69c16a61.exe
Size 1.2MB
Sample241015-ccqfdssbqq
SHA256 a1e1c8b1ab924aeb83526f74499d179cc88eb50283f96bb557f8a56d69c16a61
MD5 716877832b1d1c0e51d3f926c62998e4
SHA1 3289db03b030c1d04cda438c87a06edee2706c5b
SHA512 9c97dd5845d76500d42e971faf288bbeaf34014a775b34c102ce24fe0a56100adefa456973ba75a091fa317490d3f0c901f5a95b8d810667faaeafb42dd2f742
SSDEEP 24576:voqqHmQ2mlKHyM0L8eJ2pewFQ5JnGHw7H119DvjBsU97DW:voZmQ7ATeJ2xF4dGHwxDWUW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1e1c8b1ab924aeb83526f74499d179cc88eb50283f96bb557f8a56d69c16a61.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

a1e1c8b1ab924aeb83526f74499d179cc88eb50283f96bb557f8a56d69c16a61.exe

.exe 1.2MB
Antikvitetshandlen.Fis

302KB
Bygningselementer19.dok

433KB
frihedsgodes.sto

478KB
jaevndoegn.ski

139KB
ludgate.Gdn

.ps1 53KB
prevailingness.txt

350B

a1e1c8b1ab924aeb83526f74499d179cc88eb50283f96bb557f8a56d69c16a61.exe

IMPHASH e990dd07e89d04c53e337ab9b3f5e0cc
SHA256 a1e1c8b1ab924aeb83526f74499d179cc88eb50283f96bb557f8a56d69c16a61
MD5 716877832b1d1c0e51d3f926c62998e4
SHA1 3289db03b030c1d04cda438c87a06edee2706c5b
SHA512 9c97dd5845d76500d42e971faf288bbeaf34014a775b34c102ce24fe0a56100adefa456973ba75a091fa317490d3f0c901f5a95b8d810667faaeafb42dd2f742
SSDEEP 24576:voqqHmQ2mlKHyM0L8eJ2pewFQ5JnGHw7H119DvjBsU97DW:voZmQ7ATeJ2xF4dGHwxDWUW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12877

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA CompareFileTime SearchPathA GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA SetFileAttributesA lstrcmpiA GetCommandLineA SetErrorMode LoadLibraryA lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrcpyA lstrcatA GetSystemDirectoryA GetVersion GetProcAddress WaitForSingleObject SetFileTime CloseHandle GlobalFree lstrcmpA ExpandEnvironmentStringsA GetExitCodeProcess GlobalAlloc GetModuleHandleA LoadLibraryExA GetTempPathA GetWindowsDirectoryA FreeLibrary FindFirstFileA FindNextFileA DeleteFileA SetFilePointer ReadFile FindClose GetPrivateProfileStringA WritePrivateProfileStringA MulDiv WriteFile MultiByteToWideChar

user32

CreateWindowExA EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard GetDC SystemParametersInfoA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer GetDlgItem wsprintfA SetForegroundWindow ShowWindow IsWindow LoadImageA SetWindowLongA SetClipboardData EmptyClipboard OpenClipboard EndPaint PostQuitMessage FindWindowExA SendMessageTimeoutA SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

a1e1c8b1ab924aeb83526f74499d179cc88eb50283f96bb557f8a56d69c16a61.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

Antikvitetshandlen.Fis

Bygningselementer19.dok

frihedsgodes.sto

jaevndoegn.ski

ludgate.Gdn

prevailingness.txt