FULL-TWEAK-BY-3NTR[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
FULL-TWEAK-BY-3NTR.exe
Size 673KB
Sample241102-qegg6avelg
SHA256 ec2505b33c14e27c5304466ad308fb5ab3fe68c2724176827dc556d94b83a1ed
MD5 6e08cf02e3e669bad17794ecd4cfb990
SHA1 d60ce2339119b4f5e660cd82fca8b5b51ca485fb
SHA512 b40055db4fe33a27c3cbc3cb49d79650f661b52ecee10c2b773ab1bcd33e2324e712bc7c41633593cf0835da6934d404068400a98a9919b37b92ee96f0e50ead
SSDEEP 12288:etwbzn0ninE1QLvDrxKrSm/VE7M3Ktjm+EN:eINEOrr4Sm/VE7M64zN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FULL-TWEAK-BY-3NTR.exe

File Explorer

FULL-TWEAK-BY-3NTR.exe

.exe 673KB

FULL-TWEAK-BY-3NTR.exe

IMPHASH d2e1862cdaf88d7e4f77c034ceab8ebe
SHA256 ec2505b33c14e27c5304466ad308fb5ab3fe68c2724176827dc556d94b83a1ed
MD5 6e08cf02e3e669bad17794ecd4cfb990
SHA1 d60ce2339119b4f5e660cd82fca8b5b51ca485fb
SHA512 b40055db4fe33a27c3cbc3cb49d79650f661b52ecee10c2b773ab1bcd33e2324e712bc7c41633593cf0835da6934d404068400a98a9919b37b92ee96f0e50ead
SSDEEP 12288:etwbzn0ninE1QLvDrxKrSm/VE7M3Ktjm+EN:eINEOrr4Sm/VE7M64zN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

287760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegSetValueW RegQueryValueExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegCreateKeyExW RegCloseKey

user32

CharNextW LoadStringW MessageBoxW LoadStringW GetUserObjectInformationW GetThreadDesktop GetSystemMetrics GetProcessWindowStation CharUpperBuffW CharUpperW

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsDBCSLeadByteEx IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetConsoleOutputCP GetConsoleCP GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwindEx RtlUnwind RaiseException ExitProcess SwitchToThread GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile SetFilePointer SetEndOfFile ReadFile GetFileType GetFileSize CreateFileW GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue LocalFree LocalAlloc GetModuleHandleW FreeLibrary WriteFile WriteConsoleW WideCharToMultiByte WaitForSingleObject VirtualQuery VerSetConditionMask VerifyVersionInfoW TerminateProcess SystemTimeToFileTime SizeofResource SetThreadUILanguage SetLocalTime SetFilePointer SetEvent SetErrorMode SetEnvironmentVariableW SetCurrentDirectoryW SetConsoleTitleW SetConsoleTextAttribute SetConsoleMode SetConsoleCursorPosition SetConsoleCtrlHandler SearchPathW ScrollConsoleScreenBufferW ResetEvent ReadFile ReadConsoleW MultiByteToWideChar LockResource LocalFree LoadResource LoadLibraryW LeaveCriticalSection IsValidLocale InitializeCriticalSection GetWindowsDirectoryW GetVolumeInformationW GetVersionExW GetVersion GetUserDefaultLCID GetTimeFormatW GetThreadLocale GetSystemTime GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileType GetFileSize GetFileAttributesExW GetFileAttributesW GetExitCodeProcess GetEnvironmentVariableW GetEnvironmentStringsW GetDriveTypeW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentDirectoryW GetConsoleTitleW GetConsoleScreenBufferInfo GetConsoleOutputCP GetConsoleMode GetCommandLineW GetCPInfo GetBinaryTypeW FreeResource FreeLibrary FreeEnvironmentStringsW FormatMessageW FlushFileBuffers FlushConsoleInputBuffer FindResourceW FindNextFileW FindFirstFileW FindClose FillConsoleOutputAttribute FileTimeToSystemTime FileTimeToLocalFileTime ExitProcess EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DuplicateHandle DebugBreak CreateProcessW CreateFileW CreateEventW CreateDirectoryW CompareStringW CloseHandle SetEnvironmentStringsW GetVDMCurrentDirectories

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

mpr

WNetGetConnectionW WNetCancelConnection2W WNetAddConnection2W

netapi32

NetWkstaGetInfo

msvcrt

_ltow _ultow _wtol wcstoul wcstol _getch _pipe feof ferror fgets _pclose _wpopen fflush _dup2 _dup _close _get_osfhandle _open_osfhandle

shell32

ShellExecuteExW

Name

.text

Size

278KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

116KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

109B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

416B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

336KB

Virtual Size

335KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

FULL-TWEAK-BY-3NTR.exe

oleaut32

advapi32

user32

kernel32

version

mpr

netapi32

msvcrt

shell32

generic