81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f

General

Target
81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f
Size 129KB
Sample250103-a4kccavrdl
SHA256 81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f
MD5 4c483b142b4e92f0b8cce83145e71f10
SHA1 03d4ef761d9ab8a7ef4a61f3fac76ba42b905904
SHA512 ff5d10d60b3348225936b83983f06d135b834dcff88711dbeb1a313e96eb71877e995aa93600b61e6fdae48f2fc8339c52464209b4c0eced0b4677f6ca29d5c0
SSDEEP 3072:HJBGKgiWncy+o1z1Asbyf5yTh6s3JbrFlIvmK0WL+V0tDCa:pBGxiWnoo1z+saATh6EJXLIvZSV09Ca
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f

File Explorer

81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f

.exe 129KB

81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f

IMPHASH 96c995cdfd7bb49e723aeecefa202113
SHA256 81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f
MD5 4c483b142b4e92f0b8cce83145e71f10
SHA1 03d4ef761d9ab8a7ef4a61f3fac76ba42b905904
SHA512 ff5d10d60b3348225936b83983f06d135b834dcff88711dbeb1a313e96eb71877e995aa93600b61e6fdae48f2fc8339c52464209b4c0eced0b4677f6ca29d5c0
SSDEEP 3072:HJBGKgiWncy+o1z1Asbyf5yTh6s3JbrFlIvmK0WL+V0tDCa:pBGxiWnoo1z+saATh6EJXLIvZSV09Ca
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

98304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\browser.inet.v28.0.1500.71\src\build\Release\chrome_frame_helper.exe.pdb

kernel32

CloseHandle lstrcmpiW GetProcAddress LocalAlloc LoadLibraryW GetModuleHandleW CreateProcessW FreeLibrary GetCommandLineW GetStringTypeW LCMapStringW WriteConsoleW SetStdHandle FlushFileBuffers WaitForSingleObject ReleaseSemaphore GetCurrentThreadId LeaveCriticalSection EnterCriticalSection SetUnhandledExceptionFilter GetProcessId VirtualQueryEx CreateFileW GetCurrentProcess InterlockedDecrement DeleteCriticalSection RtlCaptureContext CreateThread CreateSemaphoreW InitializeCriticalSection InterlockedIncrement WaitNamedPipeW GetLastError WaitForMultipleObjects SetEvent ResetEvent WriteFile TransactNamedPipe GetCurrentProcessId SetNamedPipeHandleState GetModuleFileNameW LocalFree GetTempPathW RegisterWaitForSingleObject CreateEventW UnregisterWaitEx HeapSetInformation GetStartupInfoW UnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess ExitProcess RaiseException HeapFree GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime IsProcessorFeaturePresent HeapAlloc Sleep InterlockedExchange SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapSize HeapReAlloc LoadLibraryA

advapi32

RegOpenKeyExW GetTokenInformation OpenProcessToken RegQueryValueExW RegNotifyChangeKeyValue RegCloseKey ConvertSidToStringSidW

user32

GetMessageW PostQuitMessage UnregisterClassW PostMessageW EnumWindows TranslateMessage RegisterClassExW GetWindowTextW CreateWindowExW DefWindowProcW DispatchMessageW GetClassNameW

ole32

StringFromGUID2

Name

.text

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rmnet

Size

54KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

81fb3d7407c2748969ca07dbaccf9fbb67c808a4e63b9b890ef0e85e78b81d8f

kernel32

advapi32

user32

ole32

generic