5b5f3d405dc602e136ec136939bfb8f0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
5b5f3d405dc602e136ec136939bfb8f0.exe
Size 352KB
Sample260504-hya6gshs8n
SHA256 6e1b5a4cdb1ab10042cb2ccae18dd8e601c83edd5a1989652ab593dc431458f0
MD5 5b5f3d405dc602e136ec136939bfb8f0
SHA1 d36e81422d71199d4c0c93ce4f5c63b9a1274e2d
SHA512 a90927d4861409ee3d9dd88b38ca842373cb20c212431e1649583faf082eeb447da2a9556a5988027e4fb28e9442c6fe5b77d56fb6d27234ba511f2d2eadd2e0
SSDEEP 6144:76OldsqgqQ5VT3Mv0nJ9fOSntqhzOoitBC564ubYe5t:7flCjqQ5VTPnJ92Sntdtk8jk
TLSH
T17674CF1233F1C8B2C69740334DE5AF79B7B4F9640E228A876398DF0DDE3569196372A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b5f3d405dc602e136ec136939bfb8f0.exe

File Explorer

5b5f3d405dc602e136ec136939bfb8f0.exe

.exe 352KB

5b5f3d405dc602e136ec136939bfb8f0.exe

IMPHASH 87231c5c0e4b5bae78aca967400aaa3a
SHA256 6e1b5a4cdb1ab10042cb2ccae18dd8e601c83edd5a1989652ab593dc431458f0
MD5 5b5f3d405dc602e136ec136939bfb8f0
SHA1 d36e81422d71199d4c0c93ce4f5c63b9a1274e2d
SHA512 a90927d4861409ee3d9dd88b38ca842373cb20c212431e1649583faf082eeb447da2a9556a5988027e4fb28e9442c6fe5b77d56fb6d27234ba511f2d2eadd2e0
SSDEEP 6144:76OldsqgqQ5VT3Mv0nJ9fOSntqhzOoitBC564ubYe5t:7flCjqQ5VTPnJ92Sntdtk8jk
TLSH
T17674CF1233F1C8B2C69740334DE5AF79B7B4F9640E228A876398DF0DDE3569196372A1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

282624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ndsound

_DXSetSoundVolume@4 _DXProcessSound@8 _DXDestroy@0 _DXSoundinit@4 _DXPlaySound@24

winmm

timeGetTime

kernel32

RtlUnwind GetTimeZoneInformation GetLocalTime HeapFree HeapAlloc RaiseException HeapReAlloc GetStartupInfoA GetCommandLineA ExitProcess TerminateProcess HeapSize GetACP GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr GetTickCount SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType LCMapStringA LCMapStringW Sleep UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetStringTypeA GetStringTypeW SetStdHandle IsBadReadPtr IsBadCodePtr CompareStringA CompareStringW SetEnvironmentVariableA SetErrorMode GetFileTime GetFileSize GetFileAttributesA GetOEMCP GetCPInfo GetProcessVersion TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc GlobalFlags lstrcmpA GetCurrentThread FormatMessageA LocalFree GetFullPathNameA lstrcpynA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile CloseHandle FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetLastError MulDiv SetLastError FileTimeToLocalFileTime FileTimeToSystemTime GetThreadLocale MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedDecrement InterlockedIncrement GetVersion lstrcatA GetCurrentThreadId GlobalGetAtomNameA lstrcmpiA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcpyA GetModuleHandleA GlobalFree FindResourceA GlobalAlloc GlobalLock GlobalUnlock LoadResource LockResource GetPrivateProfileStringA GetSystemTime GetPrivateProfileIntA WritePrivateProfileStringA GetModuleFileNameA GetSystemDirectoryA GetCurrentDirectoryA CreateDirectoryA CopyFileA LoadLibraryA GetProcAddress FreeLibrary OutputDebugStringA InterlockedExchange

user32

MessageBeep RegisterClipboardFormatA PostThreadMessageA SetRect CopyAcceleratorTableA LoadStringA DestroyMenu GetSysColorBrush GetDesktopWindow PtInRect GetClassNameA MapDialogRect SetWindowContextHelpId GetMessageA TranslateMessage ValidateRect GetCursorPos PostQuitMessage CharUpperA GrayStringA TabbedTextOutA EndPaint BeginPaint GetWindowDC ClientToScreen CharNextA GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem ShowWindow MoveWindow SetWindowTextA IsDialogMessageA GetNextDlgGroupItem PostMessageA UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor PeekMessageA DispatchMessageA GetFocus SetFocus AdjustWindowRectEx ScreenToClient CopyRect IsWindowVisible GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextA GetDlgCtrlID GetKeyState CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetLastActivePopup GetForegroundWindow SetForegroundWindow GetWindow SetWindowLongA SetWindowPos RegisterWindowMessageA OffsetRect SystemParametersInfoA IsIconic GetWindowPlacement GetNextDlgTabItem EndDialog GetActiveWindow SetActiveWindow IsWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetParent GetWindowLongA GetDlgItem IsWindowEnabled DrawTextA ReleaseDC SendMessageA GetDC LoadIconA SetWindowRgn KillTimer LoadCursorA SetCursor GetWindowRect SetTimer EnableWindow MessageBoxA GetClientRect UnregisterClassA

gdi32

GetViewportExtEx GetWindowExtEx PtVisible TextOutA ExtTextOutA Escape DPtoLP LPtoDP GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode ScaleWindowExtEx DeleteDC SetWindowExtEx GetStockObject ExtCreateRegion DeleteObject RestoreDC SaveDC GetDeviceCaps GetBkColor GetTextColor SetTextColor SetBkMode RectVisible CreateBitmap SetBkColor GetClipBox CreateRectRgnIndirect ExtSelectClipRgn SetStretchBltMode SetDIBitsToDevice BitBlt GetObjectA SelectObject CreateCompatibleDC CreateDIBSection

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoTaskMemAlloc StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleInitialize OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter CreateILockBytesOnHGlobal OleFlushClipboard CoTaskMemFree CoRevokeClassObject

olepro32

ord253

oleaut32

SysFreeString SysAllocStringLen VariantChangeType SysAllocStringByteLen SysAllocString VariantCopy VariantClear VariantTimeToSystemTime SysStringLen

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA