20f4f8aa6e4cf07dc97a64f59eb34b196a2b7a2769d8bf57b5bda64ca9f0651b

Sharing

Copy URL Twitter E-mail

General

Target
20f4f8aa6e4cf07dc97a64f59eb34b196a2b7a2769d8bf57b5bda64ca9f0651b
Size 366KB
Sample241121-a4e3maxjhz
SHA256 20f4f8aa6e4cf07dc97a64f59eb34b196a2b7a2769d8bf57b5bda64ca9f0651b
MD5 ee92756727c572c1eeab27c039ef358d
SHA1 8ac48b08f240469ea79d22f822b5d63bdb0f6e9b
SHA512 bc986cbbcd7c8f5a33f43c2d6a94077a93eaba6ff472f91aa2e08f0a5361253fbce5ff886fdccd4ad6fd91a321fd492b154b850e437db56f2ed8e34613f943e9
SSDEEP 6144:cLHsfMZz0e/aVq6XX4jYDRbqzN7u/m5mzLccld5b2IOIQlNtGZknCtmx/LhUIT:cjsMAe/aVdXXsYFbqp7dLfJLF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20f4f8aa6e4cf07dc97a64f59eb34b196a2b7a2769d8bf57b5bda64ca9f0651b

File Explorer

20f4f8aa6e4cf07dc97a64f59eb34b196a2b7a2769d8bf57b5bda64ca9f0651b

.exe 366KB

20f4f8aa6e4cf07dc97a64f59eb34b196a2b7a2769d8bf57b5bda64ca9f0651b

IMPHASH b0c2cc8016c9605955cc314433fef865
SHA256 20f4f8aa6e4cf07dc97a64f59eb34b196a2b7a2769d8bf57b5bda64ca9f0651b
MD5 ee92756727c572c1eeab27c039ef358d
SHA1 8ac48b08f240469ea79d22f822b5d63bdb0f6e9b
SHA512 bc986cbbcd7c8f5a33f43c2d6a94077a93eaba6ff472f91aa2e08f0a5361253fbce5ff886fdccd4ad6fd91a321fd492b154b850e437db56f2ed8e34613f943e9
SSDEEP 6144:cLHsfMZz0e/aVq6XX4jYDRbqzN7u/m5mzLccld5b2IOIQlNtGZknCtmx/LhUIT:cjsMAe/aVdXXsYFbqp7dLfJLF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\Mr.Anderson\Desktop\2008\Emot\Compressor_demo\Compressor\Release\Compressor.pdb

winmm

waveOutGetVolume waveInReset waveInUnprepareHeader waveInClose waveInOpen waveInPrepareHeader waveInAddBuffer waveInStart waveOutSetVolume mixerOpen mixerGetLineInfoA mixerClose mixerGetLineControlsA mixerGetControlDetailsA mixerSetControlDetails mciGetErrorStringA

comctl32

ord17

kernel32

WriteConsoleA LoadLibraryA FreeLibrary InitializeCriticalSectionAndSpinCount IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetDateFormatA GetConsoleOutputCP WriteConsoleW OutputDebugStringA VirtualAlloc SetStdHandle GetModuleHandleA ExitProcess GetTimeFormatA SetConsoleCtrlHandler GetStringTypeW GetStringTypeA GetLocaleInfoA HeapSize CloseHandle SetFilePointer ReadFile FlushFileBuffers GetConsoleMode GetConsoleCP GetLocaleInfoW GetTimeZoneInformation CreateFileA CompareStringA CompareStringW VirtualFree HeapFree Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InterlockedIncrement InterlockedDecrement RaiseException RtlUnwind HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError SetEnvironmentVariableA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetProcAddress GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread FatalAppExitA HeapReAlloc HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime

user32

LoadIconA DialogBoxParamA SendMessageA EndDialog GetDlgItem GetClientRect GetDC ReleaseDC GetDlgCtrlID ShowWindow MessageBoxA

gdi32

DeleteDC CreateCompatibleDC CreateCompatibleBitmap CreateSolidBrush DeleteObject SelectObject

Sharing

General

Malware Config

Signatures

File Explorer

20f4f8aa6e4cf07dc97a64f59eb34b196a2b7a2769d8bf57b5bda64ca9f0651b

winmm

comctl32

kernel32

user32

gdi32

generic