61a0ead4fe4e66c98e851d328e9fc50dedaeaf94dd4426f2e4d4ce0103136741

Sharing

Copy URL Twitter E-mail

General

Target
61a0ead4fe4e66c98e851d328e9fc50dedaeaf94dd4426f2e4d4ce0103136741
Size 1.4MB
Sample260531-ync54ahv6p
SHA256 61a0ead4fe4e66c98e851d328e9fc50dedaeaf94dd4426f2e4d4ce0103136741
MD5 cda91e845cdf20a17e7bf1a74073a1ca
SHA1 676ff1c720cf9f75976a6f275c05f184941c5759
SHA512 cc656dc62bc4aead47002855e9df75772a8b0dd60f9ba48dc9e7ae1afa03a58aa0ff080e626926e423fba4a8a750086d2d2ac65521d24b5b5c90b19ffe2792d8
SSDEEP 3072:xVpDCcgMHVClYYeszXFPgg+fWHOmAMHVClYYeszXFPgg+fWHOmb:xCcNwYYe8Y5QwYYe8Y5
TLSH
T173657A472515E14AEEC87DFFC68661F76203DD18EAD183C72A61BEBDF53680A41CDA80
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61a0ead4fe4e66c98e851d328e9fc50dedaeaf94dd4426f2e4d4ce0103136741

File Explorer

61a0ead4fe4e66c98e851d328e9fc50dedaeaf94dd4426f2e4d4ce0103136741

.exe 1.4MB

61a0ead4fe4e66c98e851d328e9fc50dedaeaf94dd4426f2e4d4ce0103136741

IMPHASH c71830d41cf37a6dc818acbe6a9b2117
SHA256 61a0ead4fe4e66c98e851d328e9fc50dedaeaf94dd4426f2e4d4ce0103136741
MD5 cda91e845cdf20a17e7bf1a74073a1ca
SHA1 676ff1c720cf9f75976a6f275c05f184941c5759
SHA512 cc656dc62bc4aead47002855e9df75772a8b0dd60f9ba48dc9e7ae1afa03a58aa0ff080e626926e423fba4a8a750086d2d2ac65521d24b5b5c90b19ffe2792d8
SSDEEP 3072:xVpDCcgMHVClYYeszXFPgg+fWHOmAMHVClYYeszXFPgg+fWHOmb:xCcNwYYe8Y5QwYYe8Y5
TLSH
T173657A472515E14AEEC87DFFC68661F76203DD18EAD183C72A61BEBDF53680A41CDA80
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Téléchargement\Ouverture_Dossier_GlisserDéplacer\Release\Ouverture_Dossier_GlisserDéplacer.pdb

kernel32

EncodePointer GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent DecodePointer GetModuleHandleW

user32

InvalidateRect LoadIconW TranslateMessage BeginPaint LoadCursorW TrackMouseEvent SetLayeredWindowAttributes LoadImageW PostQuitMessage GetMessageW ScreenToClient SetWindowRgn EndPaint ShowWindow CreateWindowExW DrawIconEx DefWindowProcW RegisterClassW DispatchMessageW MessageBoxW

gdi32

CreateRoundRectRgn

shell32

DragQueryFileW ShellExecuteW DragFinish

ole32

CoInitialize CoCreateInstance CoUninitialize

msvcp120

?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAPBDH@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z

gdiplus

GdiplusShutdown GdipCreateFontFamilyFromName GdipDeleteBrush GdipFree GdipDeletePen GdipCloneBrush GdipDeleteFont GdipDeleteGraphics GdipSetStringFormatAlign GdipGraphicsClear GdipSetSmoothingMode GdipDeleteFontFamily GdipCreateSolidFill GdipAlloc GdipCreateFont GdipDrawString GdipCreateFromHDC GdipCreateStringFormat GdiplusStartup GdipDrawRectangleI GdipFillEllipseI GdipDeleteStringFormat GdipCreatePen1

msvcr120

__crtUnhandledException __crtTerminateProcess _commode _fmode _except_handler4_common _acmdln _initterm _initterm_e __setusermatherr _configthreadlocale _ismbblead _cexit _exit ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _invoke_watson _controlfp_s _CxxThrowException __CxxFrameHandler3 _crt_debugger_hook exit __set_app_type __getmainargs _amsg_exit __crtGetShowWindowMode _XcptFilter ??1type_info@@UAE@XZ _onexit __dllonexit _calloc_crt _unlock _lock ??2@YAPAXI@Z ??3@YAXPAX@Z memcpy _purecall memmove

Sharing

General

Malware Config

Signatures

File Explorer

61a0ead4fe4e66c98e851d328e9fc50dedaeaf94dd4426f2e4d4ce0103136741

kernel32

user32

gdi32

shell32

ole32

msvcp120

gdiplus

msvcr120

generic