eaad1405d982abce9c944768bb64cb756387c3808256ffc1b135b5f85509da7a[.]exe

resource
eaad1405d982abce9c944768bb64cb756387c3808256ffc1b135b5f85509da7a.exe

eaad1405d982abce9c944768bb64cb756387c3808256ffc1b135b5f85509da7a.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 eaad1405d982abce9c944768bb64cb756387c3808256ffc1b135b5f85509da7a
MD5 05f1f7e1c965912a07f1253c2de6c2f0
SHA1 53bcccc8d9b6b997b755c4df14f8246cb498259c
SHA512 e3b43cfba6324779e6354230a6d55f9822867def89bffcf0b17bf3eb9162412a80fff5e599258cbfca46d5ff9f755d33ec31a228c5c441ad0be49e268d0ce548
SSDEEP 12288:jxTzU8Xo+g0ixa0AEZQOyGOs61IYZVAecgs9FMa1Mdq8jJD:jxEQDBMljQDGMIYO7MoOD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Barkarolers.Udp

SHA256 0d8bdd61401993338e69a9d1a2ba66493af8b0a1aef3543440d1e77e3dd331c5
MD5 c542c7a7ff44ccec74fa220d8ad0007c
SHA1 36fc99ea891bc023fcbc0b613ea0a30ece42cbe6
SHA512 5e8fe51fff3476bbb8763bd7c04f7b20a4ccca8e5d8369485ebb6e3db7a279b662e995469632460d2b08cb67b20d9370e6f30397db92516b477eba671b0201b3
SSDEEP 6144:ssBEVFuZbgSUPiuL3mOOa7QqqKwrqpypYFaVhA5HWvk:sm8QZbgSO3m/5KwrWypYFI8HUk
MD5 SHA1 SHA512 SSDEEP

Premuddle.pan

SHA256 0b386475b45dd79651f3c8e805ffbd6e9b7096fbfd38e4c68508b30d5e64db26
MD5 b5ec3a0edb6326113b45fea14623ceaf
SHA1 ba0c997daf114f805835fa171f13d23dcff676e1
SHA512 b71dccd347d5e0c5158d8f1806d8924e0fc6c3e59ea28a6ff858d9e86c9014c3053903000f0c4795f5c272719946c26fab624d06a8192ed12cfb8c83ce73ae67
SSDEEP 768:LTiECJbtRVbdTe6unuPRfSBamJ60EdD9uX4Qz9JlNlj4MimHQw3rTHAlNdRmpeYD:L+7bdTeOPRfAam89dDIXvbj4oQw3rtgg
MD5 SHA1 SHA512 SSDEEP

Secundille.Ant

SHA256 c09d25505682e7a27603803198bf7610779cfe5989ab260835c5533d3881b25d
MD5 662130d89d628f1b333bd1600a467446
SHA1 9423949d8d4224998174338465130f55b32e0d6f
SHA512 badccd6767ff21cf26e21ad6e18268a5ae8ba23f54c06a59655415536afc36dd19cea877ad7049c0daaf001ab4b925195b279786505f3839491e1ec35d6d6966
SSDEEP 1536:A9yjAheHTVzmnnV63aBNE+JZM8vjS6D6vreNc:A9bhezFYxfE+LM2ZDS
MD5 SHA1 SHA512 SSDEEP

carnac/oksers.txt

SHA256 ca3d6bdac95ce07c5eff8488e54c75d6197c8bb1dab21300fff6c6c7839e2943
MD5 67678071c53b75cae98558c832ef4a23
SHA1 2f54d8bec903d561d1685790c62de580bae0a551
SHA512 2cd56892b4247cff8bf67cd5e9159216c414969be378c3c63168f7bbc8b41877c283a4159db4f9e3b22c03818b3d40ca126a93ac42cb52205d1e13b037238a3a
MD5 SHA1 SHA512

laengdespring.rum

SHA256 71fddda3070625028ee1ddaff31e2ddb0f7cc3a703744f0d1797931dd518e6ef
MD5 503d740ea6d0ceec37e2e30ee2caf591
SHA1 0408b379f4cf19dabb0c885e3358e9722e0319a7
SHA512 37546360b6ca19af2f75c4517e6259077d2414abed2cde921d45903a843d945c83880be3ecc5a31219be48334f5dd8dd19f2d3ffd2c16281ab72860c2b9819d4
SSDEEP 3072:ul75JNOdV1PTcHz3eMnALV4FMpAlwxuEgs4p26T3GFiUHOeYU1fLV16A:ulo1PTmzOMALCFVlwxC2E30lz/6A
MD5 SHA1 SHA512 SSDEEP

nasioinial.snb

SHA256 33e934cf7d3eb97d016c8fd63f0d3e8969ebdee35bac86d68f77e492e361a54f
MD5 8fa9f4a93c1e96692b0ab61d4c0025bb
SHA1 e8fede4e43914d213b4db6ec630914081fa48f5b
SHA512 f522ee5e028e8742e21ae0f1483c594925742304491cb4f16f004a314ae7f6dea46a294e4a37cc3f5dca67779d3aef53885186d8627b5baee95d7b37c5fd6108
SSDEEP 6144:LgoSDWhifVR+xluLn5Uji2tJlBaINBbAKAFoMWU:EVR+xl+n4vlMING9
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer