790336dcb87fbaba7a7c36b9b61d6e51d202ea60d3ea9f57775275545cc17e67

Sharing

Copy URL Twitter E-mail

General

Target
790336dcb87fbaba7a7c36b9b61d6e51d202ea60d3ea9f57775275545cc17e67
Size 459KB
Sample260507-z2ndnaaz21
SHA256 790336dcb87fbaba7a7c36b9b61d6e51d202ea60d3ea9f57775275545cc17e67
MD5 6b84a67cd7514d4ee31e87a667ef3dd1
SHA1 62f1c21c1584b723ee5997924ad11816af45678f
SHA512 6cdf5cd0248ab56b2283ca3ab848438976e266b8fe71efd581ea718aa0f1917d17b016438e4985a513cfd63188c4572f87cb683b4129ecce704845f193b4243b
SSDEEP 12288:WoolMjsP31xApRNN1vaV1OOr3tEMaqFnoUAtK:ysbN1vaVdunion
TLSH
T1A6A47B11A561C03AE5B382B28DBEA65E417CBE71072561D7F3C81D2E2FB19E27B31213
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
790336dcb87fbaba7a7c36b9b61d6e51d202ea60d3ea9f57775275545cc17e67

File Explorer

790336dcb87fbaba7a7c36b9b61d6e51d202ea60d3ea9f57775275545cc17e67

.exe 459KB

790336dcb87fbaba7a7c36b9b61d6e51d202ea60d3ea9f57775275545cc17e67

IMPHASH 99736fe1d2299946f10da46b21bb9529
SHA256 790336dcb87fbaba7a7c36b9b61d6e51d202ea60d3ea9f57775275545cc17e67
MD5 6b84a67cd7514d4ee31e87a667ef3dd1
SHA1 62f1c21c1584b723ee5997924ad11816af45678f
SHA512 6cdf5cd0248ab56b2283ca3ab848438976e266b8fe71efd581ea718aa0f1917d17b016438e4985a513cfd63188c4572f87cb683b4129ecce704845f193b4243b
SSDEEP 12288:WoolMjsP31xApRNN1vaV1OOr3tEMaqFnoUAtK:ysbN1vaVdunion
TLSH
T1A6A47B11A561C03AE5B382B28DBEA65E417CBE71072561D7F3C81D2E2FB19E27B31213
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

166642

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\7HS\Desktop\BO2012Launcher\build_vs2013_x86\Release_BO2012Launcher.exe.pdb

comctl32

InitCommonControlsEx

ws2_32

gethostbyname inet_ntoa gethostname

user32

DispatchMessageW TranslateMessage GetMessageW DestroyIcon LoadIconW SetMenuItemInfoW LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor MessageBoxW AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint GetDC SetForegroundWindow UpdateWindow DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow KillTimer SetTimer GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW SendMessageW TrackMouseEvent GetWindowThreadProcessId EnumWindows PostMessageW ReleaseDC

shell32

Shell_NotifyIconW ShellExecuteExW SHFileOperationW

gdi32

SetTextColor SetBkMode SetBkColor SelectObject GetStockObject EnumFontFamiliesExW DeleteObject CreateSolidBrush CreateFontW

kernel32

UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead ReleaseSemaphore DuplicateHandle VirtualProtect VirtualFree VirtualAlloc GetVersionExW LoadLibraryExW GetModuleHandleA FreeLibraryAndExitThread FreeLibrary GetThreadTimes OutputDebugStringW HeapReAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetConsoleCP QueryPerformanceCounter WriteFile GetFileType GetStdHandle IsDebuggerPresent GetProcessHeap GetCurrentThread GetOEMCP GetACP IsValidCodePage HeapSize GetModuleHandleExW ExitProcess EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW IsProcessorFeaturePresent CreateSemaphoreW GetStartupInfoW CreateEventW GetConsoleMode SetFilePointerEx LoadLibraryW SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW GetCurrentProcessId GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetFileAttributesW GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW CloseHandle WaitForSingleObject Sleep TerminateProcess GetExitCodeProcess GetProcessId OpenProcess GetTickCount GetStringTypeW GetCurrentThreadId EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer GetSystemTimeAsFileTime GetLastError HeapFree RaiseException RtlUnwind GetCommandLineW GetCPInfo HeapAlloc CreateTimerQueue SetEvent WaitForSingleObjectEx SignalObjectAndWait GetCurrentProcess SwitchToThread CreateThread SetThreadPriority GetThreadPriority TlsAlloc TlsGetValue TlsSetValue TlsFree GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetModuleHandleW GetProcAddress GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount

Sharing

General

Malware Config

Signatures

File Explorer

790336dcb87fbaba7a7c36b9b61d6e51d202ea60d3ea9f57775275545cc17e67

comctl32

ws2_32

user32

shell32

gdi32

kernel32

generic