f716a6f13daf2fac59fe39942abed277bcce33fb7dd42997c459c374837f8104

Sharing

Copy URL Twitter E-mail

General

Target
f716a6f13daf2fac59fe39942abed277bcce33fb7dd42997c459c374837f8104
Size 356KB
Sample241113-we6pyawfra
SHA256 f716a6f13daf2fac59fe39942abed277bcce33fb7dd42997c459c374837f8104
MD5 3a27545474bbc8080ad143aee30dcc5b
SHA1 922fa34c06a0bacb372f74ce6293570a5cfe0e9f
SHA512 661bb934581931043cf73d87035723d2c547eff3056a75a8a681cee11fdcca6a49c1cee9af53bbce6617fa526e6317f76e58f157bc258e1b17ea3c2030609fb2
SSDEEP 6144:hx+8x1zntFj3OB0LPJQOZGhcvSSj2x+TGLNs3EtU7L:hthFTOAQIacvSS6oqLFtsL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f716a6f13daf2fac59fe39942abed277bcce33fb7dd42997c459c374837f8104

File Explorer

f716a6f13daf2fac59fe39942abed277bcce33fb7dd42997c459c374837f8104

.exe 356KB

f716a6f13daf2fac59fe39942abed277bcce33fb7dd42997c459c374837f8104

IMPHASH c9f7e018b269f1b5fe81cf757d6f8e93
SHA256 f716a6f13daf2fac59fe39942abed277bcce33fb7dd42997c459c374837f8104
MD5 3a27545474bbc8080ad143aee30dcc5b
SHA1 922fa34c06a0bacb372f74ce6293570a5cfe0e9f
SHA512 661bb934581931043cf73d87035723d2c547eff3056a75a8a681cee11fdcca6a49c1cee9af53bbce6617fa526e6317f76e58f157bc258e1b17ea3c2030609fb2
SSDEEP 6144:hx+8x1zntFj3OB0LPJQOZGhcvSSj2x+TGLNs3EtU7L:hthFTOAQIacvSS6oqLFtsL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

41588

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WinExec LoadLibraryA GetProcAddress WriteFile GlobalReAlloc GlobalSize GetPrivateProfileStringA WritePrivateProfileStringA CreateFileA SetFilePointer ReadFile CloseHandle GlobalAlloc VirtualAlloc GlobalLock GlobalUnlock GlobalFree GetModuleHandleExA GetModuleHandleA GetStartupInfoA

user32

GetMenu GetDlgItem CharLowerA DestroyWindow ShowWindow WinHelpA DefFrameProcA EnableMenuItem GetParent DefMDIChildProcA EndDialog CharUpperA ReleaseDC GetDC SendMessageA InvalidateRect PostQuitMessage SendDlgItemMessageA wsprintfA SetWindowPos GetClientRect SetScrollRange SetScrollPos LoadStringA EndPaint BeginPaint DispatchMessageA TranslateMessage GetMessageA CreateDialogParamA UpdateWindow CreateWindowExA RegisterClassA LoadCursorA DialogBoxParamA LoadIconA

gdi32

CreatePalette DeleteObject SelectObject RealizePalette SelectPalette SaveDC SetWindowOrgEx RestoreDC LineTo MoveToEx DPtoLP Rectangle SetROP2 SetViewportExtEx SetWindowExtEx SetMapMode CreatePen GetStockObject DeleteDC BitBlt CreateCompatibleDC CreateDIBitmap

comdlg32

GetSaveFileNameA GetOpenFileNameA

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ??1_Winit@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0Init@ios_base@std@@QAE@XZ

msvcrt

_except_handler3 __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit sprintf _ftol strncpy strncmp calloc memset strcpy strlen strcmp memcpy malloc __set_app_type _controlfp

Name

.text

Size

44KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

264KB

Virtual Size

263KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f716a6f13daf2fac59fe39942abed277bcce33fb7dd42997c459c374837f8104

kernel32

user32

gdi32

comdlg32

msvcp60

msvcrt

generic