8241892ff5c9b441458ea07eac9693a7f46234e90e3f5ac8d310356e7ec5c93bN

Sharing

Copy URL Twitter E-mail

General

Target
8241892ff5c9b441458ea07eac9693a7f46234e90e3f5ac8d310356e7ec5c93bN
Size 196KB
Sample241031-bc2b8axjfj
SHA256 8241892ff5c9b441458ea07eac9693a7f46234e90e3f5ac8d310356e7ec5c93b
MD5 0d3e2cd8851f42192e639b70e109e680
SHA1 55b435c0bce90b295dc5dcc984453241938a4d7b
SHA512 2fcebe8b568e2c033d9dab06b024e257076ff2461b595e52f746ec5cf8934053b4b0ab06733b2faf7261c37cb5d7190aeec8cb09fe15b2f1b4aac0336213ff24
SSDEEP 6144:0c6BtUaNMtLLowRg4uLhuMXUk4m5xnt0Vu:0juaWLJgzLMkvou
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8241892ff5c9b441458ea07eac9693a7f46234e90e3f5ac8d310356e7ec5c93bN

File Explorer

8241892ff5c9b441458ea07eac9693a7f46234e90e3f5ac8d310356e7ec5c93bN

.exe 196KB

8241892ff5c9b441458ea07eac9693a7f46234e90e3f5ac8d310356e7ec5c93bN

IMPHASH fc5c1aac18a83503e3cae0c72797cbed
SHA256 8241892ff5c9b441458ea07eac9693a7f46234e90e3f5ac8d310356e7ec5c93b
MD5 0d3e2cd8851f42192e639b70e109e680
SHA1 55b435c0bce90b295dc5dcc984453241938a4d7b
SHA512 2fcebe8b568e2c033d9dab06b024e257076ff2461b595e52f746ec5cf8934053b4b0ab06733b2faf7261c37cb5d7190aeec8cb09fe15b2f1b4aac0336213ff24
SSDEEP 6144:0c6BtUaNMtLLowRg4uLhuMXUk4m5xnt0Vu:0juaWLJgzLMkvou
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCalendarInfoW GetEnvironmentStringsW GetTimeFormatA DuplicateHandle GetFileType GetTempFileNameW CreateFileA CompareStringW IsBadReadPtr OpenProcess SetThreadPriority lstrcat GetModuleHandleA SearchPathW RemoveDirectoryW GlobalFindAtomA FileTimeToSystemTime lstrcpynA OpenSemaphoreA lstrcatA IsBadStringPtrA SetComputerNameW CompareFileTime FindResourceA CopyFileExW SetLocaleInfoA GetVersionExA GetTempFileNameA GetStartupInfoW ExitThread SetErrorMode SearchPathA lstrcpyW InitializeCriticalSection GetLocaleInfoW GetCurrentProcess GetCommandLineW GlobalFindAtomW GlobalGetAtomNameA GetFileSize GlobalAlloc GetProcAddress CreateSemaphoreW GlobalGetAtomNameW GetSystemDirectoryW GetPriorityClass CreateMutexA FreeResource GetUserDefaultLCID

user32

LoadBitmapW EnumWindows GetKeyboardLayout GetWindowTextA EmptyClipboard CreateDialogParamW GetClassNameW GetIconInfo CharLowerW DrawTextW GetMenuItemInfoA GetWindowTextLengthW SetCursor CharNextW GetMenuState GetKeyState CheckMenuRadioItem WaitForInputIdle InsertMenuW ChildWindowFromPoint DialogBoxParamA SetWindowTextA mouse_event GetClassInfoExW CreateWindowExW GetMenuStringA GetCaretPos DestroyMenu CheckRadioButton EnumDesktopsA GetDC CreateMenu GetMenuItemID keybd_event FlashWindow CallWindowProcA MessageBeep DestroyCursor CopyRect FindWindowW SetCapture CreateCaret EnumDesktopsW FindWindowA GetMessageW GetClassInfoW

gdi32

SetEnhMetaFileBits RemoveFontResourceExW CreateEllipticRgn CreateDIBSection GetMiterLimit EnumFontFamiliesW GetRasterizerCaps GetBitmapDimensionEx GetMetaFileBitsEx

advapi32

RegOpenKeyExA RegCreateKeyW RegQueryValueA RegQueryInfoKeyW RegCreateKeyExW

shlwapi

StrCatBuffA SHRegCreateUSKeyW IntlStrEqWorkerW DllGetVersion

oleaut32

VarR8FromR4 VariantCopy VarPow VarI2FromI1 VarUI2FromR8 VarBoolFromStr OaBuildVersion

setupapi

CM_Dup_Range_List SetupGetFileQueueFlags SetupQueueRenameSectionA

Name

.text

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.JQKFDY

Size

2KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lbHO

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Omwwn

Size

3KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Hu

Size

512B

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Ft

Size

1KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Vje

Size

512B

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

1018B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8241892ff5c9b441458ea07eac9693a7f46234e90e3f5ac8d310356e7ec5c93bN

kernel32

user32

gdi32

advapi32

shlwapi

oleaut32

setupapi

generic