80fec3abccd1b92402ee722616dff2605fd5132d9b208d5069c47389247de6dd[.]exe

resource
80fec3abccd1b92402ee722616dff2605fd5132d9b208d5069c47389247de6dd.exe

80fec3abccd1b92402ee722616dff2605fd5132d9b208d5069c47389247de6dd.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 80fec3abccd1b92402ee722616dff2605fd5132d9b208d5069c47389247de6dd
MD5 2b0402915579ce1debc2f6cc55695b78
SHA1 95ef25a88cb77e153984d8cc84f5fcbd9dbf764d
SHA512 90d9770e6d241c6cd91d061e04bb48ad56ecbc271b115bb5a2b030d47397400aae42287954e0fa08da88b266264c419e2aee49231af0cc3966c8381463e00862
SSDEEP 12288:j/En283Cjdq2aXAv2zOLAJMrETpq9dXOyGOs61IYZVAecgs9FMa1Mdq8jJA:jM2gCy42qLAJeETpqDGMIYO7MoOA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Chymes.Ari

SHA256 ec27c4d9af6cbacd93b645c053a5f4395c8c681e40fc203efd78fd139ed45c82
MD5 c44effc2e31c09744797d777080d6f2e
SHA1 8828388bd410c357e6b97cab00bb61519195f824
SHA512 2f40b4211743380d4126749b98e99301a879ebed0fc2d811d39c1c674ae2a0961d7a2044aa8755221e34617c482c83b444e3c54e9823de0688eec3f4a712e203
SSDEEP 1536:0MvcHJCJBjaqb4Dwjfrfo4zajOJRmaEgUys/Qarn:0M2KBr8DWrw0ajO/ma6y4QE
MD5 SHA1 SHA512 SSDEEP

Magnetiseringer.Mil228

SHA256 626ba17ac5167bdac4d90c5caf3c01ad7b4731d3be7187df1de75ac77be6c955
MD5 3a1f8941f5588a4227301079facc5a9e
SHA1 800c3ca8a0aa541193dfdae7d35a7af629104829
SHA512 4097f9f48c5e6cff0db600b8ad475966653e98828472724c72f9396de5da4653146fe2addd4b12b4b098b4d8f3b38a1abf2554f28cf53c0912fd9d67b4f8cbd1
SSDEEP 6144:FtkmoeozNSEMQD5OoZIwOANFMCK3890pNKtxtTCSKrA15CfMD5hP:MqBEMs5OoZIwO4PO88Nm/CSggCfUL
MD5 SHA1 SHA512 SSDEEP

Premuddle.pan

SHA256 0b386475b45dd79651f3c8e805ffbd6e9b7096fbfd38e4c68508b30d5e64db26
MD5 b5ec3a0edb6326113b45fea14623ceaf
SHA1 ba0c997daf114f805835fa171f13d23dcff676e1
SHA512 b71dccd347d5e0c5158d8f1806d8924e0fc6c3e59ea28a6ff858d9e86c9014c3053903000f0c4795f5c272719946c26fab624d06a8192ed12cfb8c83ce73ae67
SSDEEP 768:LTiECJbtRVbdTe6unuPRfSBamJ60EdD9uX4Qz9JlNlj4MimHQw3rTHAlNdRmpeYD:L+7bdTeOPRfAam89dDIXvbj4oQw3rtgg
MD5 SHA1 SHA512 SSDEEP

laengdespring.rum

SHA256 71fddda3070625028ee1ddaff31e2ddb0f7cc3a703744f0d1797931dd518e6ef
MD5 503d740ea6d0ceec37e2e30ee2caf591
SHA1 0408b379f4cf19dabb0c885e3358e9722e0319a7
SHA512 37546360b6ca19af2f75c4517e6259077d2414abed2cde921d45903a843d945c83880be3ecc5a31219be48334f5dd8dd19f2d3ffd2c16281ab72860c2b9819d4
SSDEEP 3072:ul75JNOdV1PTcHz3eMnALV4FMpAlwxuEgs4p26T3GFiUHOeYU1fLV16A:ulo1PTmzOMALCFVlwxC2E30lz/6A
MD5 SHA1 SHA512 SSDEEP

nasioinial.snb

SHA256 33e934cf7d3eb97d016c8fd63f0d3e8969ebdee35bac86d68f77e492e361a54f
MD5 8fa9f4a93c1e96692b0ab61d4c0025bb
SHA1 e8fede4e43914d213b4db6ec630914081fa48f5b
SHA512 f522ee5e028e8742e21ae0f1483c594925742304491cb4f16f004a314ae7f6dea46a294e4a37cc3f5dca67779d3aef53885186d8627b5baee95d7b37c5fd6108
SSDEEP 6144:LgoSDWhifVR+xluLn5Uji2tJlBaINBbAKAFoMWU:EVR+xl+n4vlMING9
MD5 SHA1 SHA512 SSDEEP

oksers.txt

SHA256 ca3d6bdac95ce07c5eff8488e54c75d6197c8bb1dab21300fff6c6c7839e2943
MD5 67678071c53b75cae98558c832ef4a23
SHA1 2f54d8bec903d561d1685790c62de580bae0a551
SHA512 2cd56892b4247cff8bf67cd5e9159216c414969be378c3c63168f7bbc8b41877c283a4159db4f9e3b22c03818b3d40ca126a93ac42cb52205d1e13b037238a3a
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer