08b7a1d5ef310532b540a6f99dcaddcc0e0cd9666c9339feaafd4dcb2bf72541

Sharing

Copy URL Twitter E-mail

General

Target
08b7a1d5ef310532b540a6f99dcaddcc0e0cd9666c9339feaafd4dcb2bf72541
Size 251KB
Sample260510-lef46scx21
SHA256 08b7a1d5ef310532b540a6f99dcaddcc0e0cd9666c9339feaafd4dcb2bf72541
MD5 103a1332d85f2cf517aae3224dd9a417
SHA1 fcc9d05a4afacb387cfdf117e5799077897585db
SHA512 2e2b106400c73d00b2fac54d4a2b4ecc9819a7e53d85c93656559892997cb739da296a1a730cd87f51e16ff99852b50183c30c2fefd1a88cee2e16c8c497ffd6
SSDEEP 3072:izE4B4bEoI4zdK4jYNfZx30oeK5fwXY4xdqEtoQEwczQz55z4hPPC3jgNcchZHAK:igVbVBjYNoo/Bwo0vEH0NMsjfchZ
TLSH
T12D443910F989D501DD645A7BADBAF165027F9C112E108A5FAF883FD90877E83F532A32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b7a1d5ef310532b540a6f99dcaddcc0e0cd9666c9339feaafd4dcb2bf72541

File Explorer

08b7a1d5ef310532b540a6f99dcaddcc0e0cd9666c9339feaafd4dcb2bf72541

.exe 251KB

08b7a1d5ef310532b540a6f99dcaddcc0e0cd9666c9339feaafd4dcb2bf72541

IMPHASH f532acd0ec2ef525c27a2081d8f60a15
SHA256 08b7a1d5ef310532b540a6f99dcaddcc0e0cd9666c9339feaafd4dcb2bf72541
MD5 103a1332d85f2cf517aae3224dd9a417
SHA1 fcc9d05a4afacb387cfdf117e5799077897585db
SHA512 2e2b106400c73d00b2fac54d4a2b4ecc9819a7e53d85c93656559892997cb739da296a1a730cd87f51e16ff99852b50183c30c2fefd1a88cee2e16c8c497ffd6
SSDEEP 3072:izE4B4bEoI4zdK4jYNfZx30oeK5fwXY4xdqEtoQEwczQz55z4hPPC3jgNcchZHAK:igVbVBjYNoo/Bwo0vEH0NMsjfchZ
TLSH
T12D443910F989D501DD645A7BADBAF165027F9C112E108A5FAF883FD90877E83F532A32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer MapViewOfFile UnmapViewOfFile lstrcpynA FindResourceExW FreeLibrary LoadResource CreateProcessW HeapAlloc LoadLibraryExW EndUpdateResourceW SystemTimeToFileTime HeapFree WaitForSingleObject GetLogicalDrives FlushViewOfFile GetTickCount GetProcessHeap ExpandEnvironmentStringsA SetFileTime GetWindowsDirectoryA WriteFile GetDriveTypeA OpenProcess WideCharToMultiByte GetVolumeInformationA VirtualFreeEx LoadLibraryW Sleep SizeofResource ReadProcessMemory GetFileAttributesA lstrcpynW FileTimeToSystemTime ReadFile GetModuleFileNameW CreateFileW CreateMutexW lstrlenW FindFirstFileA GetLastError lstrcmpiA GetProcAddress AttachConsole BeginUpdateResourceW SetFileAttributesA VirtualAllocEx GetTempFileNameA FindClose GetLocalTime CreateFileMappingA CreateFileMappingW LockResource GetModuleFileNameA FindNextFileA lstrcatW UpdateResourceW GetCurrentDirectoryA GetFileTime CloseHandle EnumResourceLanguagesW DeleteFileW GetTempPathA WriteProcessMemory lstrcpyW DeleteFileA CreateThread lstrcpyA GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter IsDebuggerPresent InterlockedCompareExchange GetFileSize CreateFileA MultiByteToWideChar EnumResourceNamesW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoA InterlockedExchange

shell32

SHGetFolderPathA

ole32

CoUninitialize CoInitialize CoCreateInstance

advapi32

RegEnumValueA RegOpenKeyExA RegCloseKey

user32

GetParent wsprintfA FindWindowExA SendMessageA EnumWindows SetWindowLongA GetClassNameA GetWindowLongA GetCursorPos GetSystemMetrics UpdateWindow GetWindowThreadProcessId GetShellWindow InvalidateRect

msvcr80

memset _controlfp_s _invoke_watson _except_handler4_common _decode_pointer _onexit _lock __dllonexit _unlock memcpy _stricmp _mktime64 _strnicmp sqrt cos free calloc strlen strchr wcsrchr rand strcmp srand strrchr getenv _time64 sin _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale __setusermatherr _adjust_fdiv __p__commode __p__fmode _encode_pointer __set_app_type _crt_debugger_hook

Sharing

General

Malware Config

Signatures

File Explorer

08b7a1d5ef310532b540a6f99dcaddcc0e0cd9666c9339feaafd4dcb2bf72541

kernel32

shell32

ole32

advapi32

user32

msvcr80

generic