9c04c599da6d6f1d1258d5124c069094cce5b545d81c0ab9a669adcaa3af0c62

Sharing

Copy URL Twitter E-mail

General

Target
9c04c599da6d6f1d1258d5124c069094cce5b545d81c0ab9a669adcaa3af0c62
Size 458KB
Sample260528-bh26psev91
SHA256 9c04c599da6d6f1d1258d5124c069094cce5b545d81c0ab9a669adcaa3af0c62
MD5 264485e51012ec1d32428dab167e39ec
SHA1 bb74c086009edd0b8d3a6ecaa9ae5f914534cceb
SHA512 693893d187fb032edc783eb1367825220044cd09fae5aa10f96a7ba54c1b530c1d06a1ecf3999fd48387c9df1765d9510213d4955fbb51f288ab8caf3975395c
SSDEEP 3072:lq7sDcn6lQ64SBOksDDJ73n8rVc3uQmnzlwkI9BwPcm:lq7sDcn6lWSBOksDDJ7X85Q8ZJI
TLSH
T145A42985C985404ADD6E6F38D2335D39D123BDA86FF5A68F8B8538A97B735C1093E203
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c04c599da6d6f1d1258d5124c069094cce5b545d81c0ab9a669adcaa3af0c62

File Explorer

9c04c599da6d6f1d1258d5124c069094cce5b545d81c0ab9a669adcaa3af0c62

.exe 458KB

9c04c599da6d6f1d1258d5124c069094cce5b545d81c0ab9a669adcaa3af0c62

IMPHASH e07f698d1c5500027b0f5872d3da66c7
SHA256 9c04c599da6d6f1d1258d5124c069094cce5b545d81c0ab9a669adcaa3af0c62
MD5 264485e51012ec1d32428dab167e39ec
SHA1 bb74c086009edd0b8d3a6ecaa9ae5f914534cceb
SHA512 693893d187fb032edc783eb1367825220044cd09fae5aa10f96a7ba54c1b530c1d06a1ecf3999fd48387c9df1765d9510213d4955fbb51f288ab8caf3975395c
SSDEEP 3072:lq7sDcn6lQ64SBOksDDJ73n8rVc3uQmnzlwkI9BwPcm:lq7sDcn6lWSBOksDDJ7X85Q8ZJI
TLSH
T145A42985C985404ADD6E6F38D2335D39D123BDA86FF5A68F8B8538A97B735C1093E203
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25652

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dwmapi

DwmSetWindowAttribute

connectivity_plus_plugin

ConnectivityPlusWindowsPluginRegisterWithRegistrar

dynamic_color_plugin

DynamicColorPluginCApiRegisterWithRegistrar

file_selector_windows_plugin

FileSelectorWindowsRegisterWithRegistrar

flutter_inappwebview_windows_plugin

FlutterInappwebviewWindowsPluginCApiRegisterWithRegistrar

flutter_js_plugin

FlutterJsPluginRegisterWithRegistrar

proxy_plugin

ProxyPluginCApiRegisterWithRegistrar

screen_retriever_windows_plugin

ScreenRetrieverWindowsPluginCApiRegisterWithRegistrar

sqlite3_flutter_libs_plugin

Sqlite3FlutterLibsPluginRegisterWithRegistrar

tray_manager_plugin

TrayManagerPluginRegisterWithRegistrar

url_launcher_windows_plugin

UrlLauncherWindowsRegisterWithRegistrar

window_ext_plugin

WindowExtPluginCApiRegisterWithRegistrar

window_manager_plugin

WindowManagerPluginRegisterWithRegistrar

windows_single_instance_plugin

WindowsSingleInstancePluginRegisterWithRegistrar

flutter_windows

FlutterDesktopMessengerUnlock FlutterDesktopViewGetHWND FlutterDesktopResyncOutputStreams FlutterDesktopMessengerLock FlutterDesktopEngineCreate FlutterDesktopEngineDestroy FlutterDesktopEngineReloadSystemFonts FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineGetMessenger FlutterDesktopEngineSetNextFrameCallback FlutterDesktopViewControllerCreate FlutterDesktopGetDpiForMonitor FlutterDesktopViewControllerForceRedraw FlutterDesktopViewControllerDestroy FlutterDesktopViewControllerGetView FlutterDesktopMessengerIsAvailable FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopMessengerSend FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSetCallback FlutterDesktopMessengerAddRef FlutterDesktopMessengerRelease

kernel32

GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead AttachConsole GetCommandLineW LocalFree WideCharToMultiByte AllocConsole FreeLibrary GetModuleHandleW GetProcAddress IsDebuggerPresent LoadLibraryA GetStartupInfoW

user32

MonitorFromPoint LoadIconW LoadCursorW SetParent SetWindowLongPtrW GetWindowLongPtrW GetClientRect SetFocus SetWindowPos MoveWindow DestroyWindow CreateWindowExW UnregisterClassW RegisterClassW GetMessageW TranslateMessage DispatchMessageW DefWindowProcW PostQuitMessage

shell32

CommandLineToArgvW

ole32

CoInitializeEx CoUninitialize

advapi32

RegGetValueW

msvcp140

?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ?_Xbad_function_call@std@@YAXXZ ?sync_with_stdio@ios_base@std@@SA_N_N@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?_Xlength_error@std@@YAXPEBD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset __std_terminate __std_type_info_compare memcmp __C_specific_handler memcpy __current_exception __current_exception_context __std_exception_copy __std_exception_destroy _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm _get_wide_winmain_command_line exit _configure_wide_argv _exit _set_app_type _seh_filter_exe _register_thread_local_exe_atexit_callback _cexit _initialize_wide_environment _c_exit _crt_atexit _invoke_watson _register_onexit_function terminate _initialize_onexit_table

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func freopen_s _dup2 __p__commode _fileno _set_fmode

api-ms-win-crt-heap-l1-1-0

free _set_new_mode _callnewh malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

9c04c599da6d6f1d1258d5124c069094cce5b545d81c0ab9a669adcaa3af0c62

dwmapi

connectivity_plus_plugin

dynamic_color_plugin

file_selector_windows_plugin

flutter_inappwebview_windows_plugin

flutter_js_plugin

proxy_plugin

screen_retriever_windows_plugin

sqlite3_flutter_libs_plugin

tray_manager_plugin

url_launcher_windows_plugin

window_ext_plugin

window_manager_plugin

windows_single_instance_plugin

flutter_windows

kernel32

user32

shell32

ole32

advapi32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic