87651eca3d0805dfb6101740fef55a8624c8f0d1103df0d32be808a29659e241

Sharing

Copy URL Twitter E-mail

General

Target
87651eca3d0805dfb6101740fef55a8624c8f0d1103df0d32be808a29659e241
Size 215KB
Sample241111-a1791axqht
SHA256 87651eca3d0805dfb6101740fef55a8624c8f0d1103df0d32be808a29659e241
MD5 64da2a3954188fbe50b5b900f61e8444
SHA1 58635d75f3f12a7c0135e16694c948e08f0dd4fc
SHA512 71e8e9f5966875af8b1af526ca348454bd14756d48e3943b2dd8cdd1c957225c2bc8c652023cd4037c3999f14ff922a978b20b8df3ae638a470f6983bf777fa0
SSDEEP 6144:PJcxlKhSGoqTecGy9+hAu7//QnSrMhcZEps:PS8hbTiyqA4QnSQhcZ8s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87651eca3d0805dfb6101740fef55a8624c8f0d1103df0d32be808a29659e241

File Explorer

87651eca3d0805dfb6101740fef55a8624c8f0d1103df0d32be808a29659e241

.exe 215KB

87651eca3d0805dfb6101740fef55a8624c8f0d1103df0d32be808a29659e241

IMPHASH 55a510ff3441aca1de0a1cc299b2a8f8
SHA256 87651eca3d0805dfb6101740fef55a8624c8f0d1103df0d32be808a29659e241
MD5 64da2a3954188fbe50b5b900f61e8444
SHA1 58635d75f3f12a7c0135e16694c948e08f0dd4fc
SHA512 71e8e9f5966875af8b1af526ca348454bd14756d48e3943b2dd8cdd1c957225c2bc8c652023cd4037c3999f14ff922a978b20b8df3ae638a470f6983bf777fa0
SSDEEP 6144:PJcxlKhSGoqTecGy9+hAu7//QnSrMhcZEps:PS8hbTiyqA4QnSQhcZ8s
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

52746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime GetExpandedNameA GetFullPathNameW QueryPerformanceFrequency lstrcmpA CreateMutexW GetOEMCP GetShortPathNameW ExpandEnvironmentStringsA CopyFileExW CreateEventW lstrlenA lstrcmp GetTimeFormatW IsValidLocale Sleep MulDiv GetEnvironmentStringsW CompareStringW GetTempPathW FileTimeToLocalFileTime CreateMailslotA ReplaceFileA Beep SleepEx GetVolumeInformationW GetUserDefaultLCID lstrcpyA SetErrorMode QueryPerformanceCounter GetDateFormatW GetCurrentDirectoryW LoadLibraryW GetModuleHandleW GetModuleHandleA ReadDirectoryChangesW GetLastError SearchPathW GetCurrentProcess GetProcAddress GetStringTypeA

user32

SetWindowTextW IsChild ClientToScreen FillRect GetMenuInfo ArrangeIconicWindows GetMenuState GetMessageW GetForegroundWindow LoadMenuIndirectW InsertMenuA DialogBoxParamA EnumDesktopsW RegisterClassA SetCapture MoveWindow CreateDialogIndirectParamA CreateDesktopW SetParent GetActiveWindow SetDlgItemInt GetDlgItemInt CopyRect EmptyClipboard GetMenuItemInfoA SetWindowPos MessageBoxA FindWindowW DestroyIcon IsWindowEnabled SetWindowTextA IsMenu IsIconic MonitorFromPoint WinHelpW ShowCursor GetDlgItemTextA CreateDialogParamW FindWindowA

gdi32

CreateCompatibleBitmap LineTo SetICMProfileA PolyBezierTo SetBitmapDimensionEx SetMetaFileBitsEx SetPixel ScaleWindowExtEx EnumFontFamiliesA PlayEnhMetaFile SetViewportExtEx SwapBuffers ColorMatchToTarget GetOutlineTextMetricsW CopyEnhMetaFileA GetStockObject

advapi32

RegQueryValueA RegOpenKeyExA RegQueryValueExW RegCloseKey RegSaveKeyW RegQueryMultipleValuesA RegSaveKeyA RegOpenKeyA

comdlg32

GetSaveFileNameW GetSaveFileNameA ReplaceTextA PrintDlgExW GetOpenFileNameA ChooseFontW PrintDlgW PageSetupDlgW ChooseFontA GetFileTitleA

ole32

CreateFileMoniker CoGetObject BindMoniker CoGetDefaultContext OleCreateEx CoInitializeEx CoGetClassVersion CoGetClassObject

version

VerQueryValueA VerQueryValueW VerFindFileW

ws2_32

WSASend WSASendTo WSADuplicateSocketA WSAGetLastError WSAEventSelect getpeername WSAEnumProtocolsW

urlmon

IsValidURL GetMarkOfTheWeb CopyStgMedium IsLoggingEnabledA WriteHitLogging URLDownloadA URLOpenStreamW RegisterBindStatusCallback CoInternetCombineUrl HlinkGoForward

winmm

mixerClose joy32Message midiStreamPosition waveInGetNumDevs wod32Message waveOutSetVolume joyGetDevCapsW mciGetDriverData joyGetPos mixerMessage DriverCallback

winspool.drv

GetPrintProcessorDirectoryW SetPrinterDataW DeleteFormW SetPrinterDataExW AddPrinterW GetPrinterW EnumPrinterKeyW AddPrinterDriverW DeletePrinterConnectionA AddMonitorA

oledlg

OleUIChangeSourceW OleUIPromptUserW OleUIPasteSpecialW OleUIUpdateLinksW OleUIPromptUserA OleUIObjectPropertiesA OleUIChangeSourceA OleUIChangeIconA OleUIConvertA OleUIBusyA

wsock32

WSAStartup

Name

.edata

Size

1KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

1KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

1024B

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

170KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

87651eca3d0805dfb6101740fef55a8624c8f0d1103df0d32be808a29659e241

kernel32

user32

gdi32

advapi32

comdlg32

ole32

version

ws2_32

urlmon

winmm

winspool.drv

oledlg

wsock32

generic