2bb21c0ff4ae9644fb48697181fd457742820ceba5fcf88934369d4aa80ae793

Sharing

Copy URL Twitter E-mail

General

Target
2bb21c0ff4ae9644fb48697181fd457742820ceba5fcf88934369d4aa80ae793
Size 1.4MB
Sample241102-cq7xlaybrk
SHA256 2bb21c0ff4ae9644fb48697181fd457742820ceba5fcf88934369d4aa80ae793
MD5 c114ddb7cb738c3f816b59b38b900468
SHA1 d8546d94654b4b8439f27b15e834c72fbd14bb3e
SHA512 ca6692c1e94e5a61e3bf066748a4836b8feb263fa3fe55c8bfa5a3c1a91dc6a230e7c0dd9dd92f56bbe06af515b313cdc3c276fc4bb2bea25839fe6985e29c3f
SSDEEP 24576:SFQUUml+cvnZuvWOHJZsE6/4lueYnHoznGR5TePcqMsVmklky4iibCq8nEA:Ssml+cfZsWOHt44luNnIzUwsjB/pCnV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bb21c0ff4ae9644fb48697181fd457742820ceba5fcf88934369d4aa80ae793

File Explorer

2bb21c0ff4ae9644fb48697181fd457742820ceba5fcf88934369d4aa80ae793

.exe 1.4MB

2bb21c0ff4ae9644fb48697181fd457742820ceba5fcf88934369d4aa80ae793

IMPHASH 5b5affe5cc3d8e2098fc60270b23e0a6
SHA256 2bb21c0ff4ae9644fb48697181fd457742820ceba5fcf88934369d4aa80ae793
MD5 c114ddb7cb738c3f816b59b38b900468
SHA1 d8546d94654b4b8439f27b15e834c72fbd14bb3e
SHA512 ca6692c1e94e5a61e3bf066748a4836b8feb263fa3fe55c8bfa5a3c1a91dc6a230e7c0dd9dd92f56bbe06af515b313cdc3c276fc4bb2bea25839fe6985e29c3f
SSDEEP 24576:SFQUUml+cvnZuvWOHJZsE6/4lueYnHoznGR5TePcqMsVmklky4iibCq8nEA:Ssml+cfZsWOHt44luNnIzUwsjB/pCnV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA FreeSid RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegCreateKeyExA RegQueryInfoKeyA

kernel32

LocalAlloc GetLastError GetCurrentProcess LoadLibraryA CloseHandle LocalFree GetFileAttributesA GetPrivateProfileStringA GetPrivateProfileIntA lstrlenA lstrcmpiA lstrcatA GetShortPathNameA GetSystemDirectoryA RemoveDirectoryA lstrcpyA FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA GetModuleFileNameA FindClose GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte ExitProcess GetProcAddress GetStartupInfoA GetCommandLineA LoadResource FindResourceA CreateMutexA SetEvent CreateEventA SetCurrentDirectoryA CreateThread ResetEvent TerminateThread GetVersionExA FreeLibrary GetExitCodeProcess WaitForSingleObject CreateProcessA GetTempPathA FreeResource LockResource SizeofResource CreateFileA ReadFile WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GetTempFileNameA GetSystemInfo GetDriveTypeA lstrcpynA GetVolumeInformationA GetCurrentDirectoryA LoadLibraryExA GetModuleHandleA CreateDirectoryA ExpandEnvironmentStringsA FormatMessageA EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA

gdi32

GetDeviceCaps

user32

ExitWindowsEx CharNextA CharUpperA CharPrevA SetWindowLongA wsprintfA GetWindowLongA CallWindowProcA GetDlgItem SetForegroundWindow SetWindowTextA SendDlgItemMessageA EnableWindow GetDesktopWindow EndDialog DispatchMessageA LoadStringA PeekMessageA MessageBoxA SetWindowPos ReleaseDC GetDC GetWindowRect ShowWindow DialogBoxIndirectParamA SetDlgItemTextA MessageBeep SendMessageA GetDlgItemTextA MsgWaitForMultipleObjects GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

2bb21c0ff4ae9644fb48697181fd457742820ceba5fcf88934369d4aa80ae793

advapi32

kernel32

gdi32

user32

comctl32

version

generic