TWETL(64-bit)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
TWETL(64-bit).exe
Size 126.5MB
Sample260417-s792aaex2x
SHA256 1b708a3c7c477688881a68f70274c7bb391f2cc2604823b76d535d8453350720
MD5 3a4e7750998c141f1df8981963c2d475
SHA1 e98ad40ec900a0e5503741bc2bedfc17424cdfad
SHA512 589ccbeda559e2303512cfa9fd726c2838929d83cbc6a684cc074677df15d92fe825c0814561877cab253e2d46baefac086fb93cf829aba657bf94f15173ce98
SSDEEP 3145728:rWneQsFVPB/W3C7+sgFHzvY0wfIIskF9sWhx:rTQsFvF7mFTvb2fhp
TLSH
T18F583313A2A5812CE57922709C6FAF7091A47D338A218667F394FF1D2EF15C27623B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TWETL(64-bit).exe

File Explorer

TWETL(64-bit).exe

.exe 126.5MB

TWETL(64-bit).exe

IMPHASH dab35f1ed7229c574624f07d89a7585f
SHA256 1b708a3c7c477688881a68f70274c7bb391f2cc2604823b76d535d8453350720
MD5 3a4e7750998c141f1df8981963c2d475
SHA1 e98ad40ec900a0e5503741bc2bedfc17424cdfad
SHA512 589ccbeda559e2303512cfa9fd726c2838929d83cbc6a684cc074677df15d92fe825c0814561877cab253e2d46baefac086fb93cf829aba657bf94f15173ce98
SSDEEP 3145728:rWneQsFVPB/W3C7+sgFHzvY0wfIIskF9sWhx:rTQsFvF7mFTvb2fhp
TLSH
T18F583313A2A5812CE57922709C6FAF7091A47D338A218667F394FF1D2EF15C27623B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

269319

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\CodeBases\isdev\redist\Language Independent\i386\ISP\setup.pdb

comctl32

ord17

kernel32

CompareStringA GetSystemDefaultLangID GetUserDefaultLangID ExpandEnvironmentStringsW GetCurrentDirectoryW FileTimeToLocalFileTime GetFileTime SetFileAttributesW HeapAlloc HeapFree GetProcessHeap CopyFileW GetSystemDefaultUILanguage GlobalAlloc LocalFree MulDiv GetVersionExW InterlockedDecrement InterlockedIncrement GetTempPathW CreateFileW LoadLibraryA GetSystemDirectoryA FindResourceW GlobalUnlock GlobalLock CompareStringW LockResource LoadResource MultiByteToWideChar MoveFileExW WriteProcessMemory VirtualProtectEx GetWindowsDirectoryW GetSystemDirectoryW FlushInstructionCache SetThreadContext GetThreadContext ResumeThread TerminateProcess ExitProcess IsBadReadPtr GetPrivateProfileIntW LoadLibraryW lstrcatW lstrcpynW lstrcmpiW LoadLibraryExW FreeLibrary FindResourceExW UnmapViewOfFile MapViewOfFile CreateFileMappingW VirtualQuery GetSystemInfo GetSystemTimeAsFileTime CreateEventW CreateMutexW ReleaseMutex DeleteCriticalSection InitializeCriticalSectionAndSpinCount QueryPerformanceFrequency FreeResource GetPrivateProfileSectionNamesA GetPrivateProfileStringA GetPrivateProfileIntA lstrcatA lstrcmpiA FlushFileBuffers WriteConsoleW SetStdHandle OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP SetErrorMode RaiseException WriteFile SetFilePointer GetFileSize GetFileAttributesW GetDiskFreeSpaceExW GetDiskFreeSpaceW FindFirstFileW FindClose CreateDirectoryW VerLanguageNameW IsValidLocale GetLocaleInfoW WideCharToMultiByte lstrcpyA GetTickCount ExitThread CreateThread GetExitCodeProcess ReadFile GetCommandLineW SizeofResource FormatMessageW GetCurrentProcess WaitForSingleObject SetLastError GetLastError DuplicateHandle RemoveDirectoryW DeleteFileW SetCurrentDirectoryW lstrlenW lstrcpyW GetProcAddress GetModuleHandleW GetModuleFileNameW CreateProcessW Sleep CloseHandle GlobalFree ReadConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType HeapReAlloc GetStdHandle HeapSize GetModuleHandleExW GetStringTypeW GetCurrentThreadId GetCPInfo GetOEMCP IsValidCodePage GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter GetACP IsProcessorFeaturePresent IsDebuggerPresent RtlUnwind FindNextFileW lstrcmpW GetCurrentThread QueryPerformanceCounter lstrcmpA SystemTimeToFileTime ResetEvent SetEvent GetDateFormatW GetTimeFormatW GetTempFileNameW CompareFileTime SetFileTime OpenProcess GetProcessTimes InterlockedExchange LoadLibraryExA EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer LCMapStringW GetVersion GetCurrentProcessId GetLocalTime lstrlenA

user32

DialogBoxIndirectParamW MoveWindow SendMessageW WaitForInputIdle wsprintfW GetDlgItem SetDlgItemTextW EndDialog SetForegroundWindow SetWindowTextW GetWindowRect MessageBoxW GetWindowLongW SetWindowLongW LoadIconW TranslateMessage DispatchMessageW PeekMessageW SetActiveWindow SystemParametersInfoW GetWindow FillRect GetSysColor MapWindowPoints RemovePropW GetPropW SetPropW EndPaint BeginPaint EnableMenuItem GetSystemMetrics SetFocus ExitWindowsEx CharUpperW wsprintfA CallWindowProcW CreateWindowExW DrawIcon DrawTextW UpdateWindow GetWindowDC InvalidateRect DrawFocusRect CopyRect InflateRect EnumChildWindows GetClassNameW MapDialogRect RegisterClassExW GetDlgItemTextW IntersectRect MonitorFromPoint DefWindowProcW GetMessageW LoadStringW LoadImageW ReleaseDC GetDC CreateDialogParamW GetParent GetWindowTextW CharNextW GetDesktopWindow GetClientRect IsWindowEnabled CreateDialogIndirectParamW IsWindowVisible IsDialogMessageW FindWindowExW ScreenToClient EnableWindow MsgWaitForMultipleObjects SendDlgItemMessageW SetWindowPos ShowWindow DestroyWindow IsWindow PostMessageW

gdi32

SetTextColor SetBkMode SetBkColor SaveDC RestoreDC CreateSolidBrush UnrealizeObject CreateHalftonePalette GetDIBColorTable SelectPalette SelectObject RealizePalette GetSystemPaletteEntries GetDeviceCaps DeleteDC CreatePalette CreateCompatibleDC BitBlt GetObjectW TranslateCharsetInfo DeleteObject CreateFontIndirectW CreateCompatibleBitmap CreateDCW CreatePatternBrush GetStockObject GetTextExtentPoint32W DeleteMetaFile CreateDIBitmap CreateBitmap CreateRectRgn PatBlt PlayMetaFile SelectClipRgn SetMapMode SetMetaFileBitsEx SetPixel StretchBlt SetStretchBltMode SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx TextOutW

advapi32

RegEnumValueW RegQueryValueExW SetEntriesInAclW RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor CreateWellKnownSid RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegOpenKeyW OpenProcessToken AdjustTokenPrivileges AllocateAndInitializeSid FreeSid LookupPrivilegeValueW RegEnumKeyW OpenThreadToken GetTokenInformation EqualSid

shell32

ShellExecuteExW SHGetSpecialFolderLocation SHGetMalloc SHGetPathFromIDListW

ole32

CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance CoInitializeSecurity CreateStreamOnHGlobal CoInitializeEx CoUninitialize

oleaut32

VarUI4FromStr VarBstrCmp VariantChangeType VarBstrCat SysAllocString SysFreeString SysStringLen SysAllocStringLen SysReAllocStringLen GetErrorInfo SysStringByteLen VariantInit SysAllocStringByteLen VariantClear

shlwapi

PathFileExistsW

rpcrt4

UuidCreate RpcStringFreeW UuidToStringW

gdiplus

GdipFree GdipDrawImageRectI GdipSetInterpolationMode GdipDeleteGraphics GdipCreateFromHDC GdipCreateBitmapFromResource GdipCreateBitmapFromStreamICM GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdiplusStartup GdipGetImageWidth GdipGetImageHeight GdipAlloc