caa221b9d5d1fe3652238028862a7fb3c257626abb131f243e5cd208ef49b12f

Sharing

Copy URL Twitter E-mail

General

Target
caa221b9d5d1fe3652238028862a7fb3c257626abb131f243e5cd208ef49b12f
Size 3.0MB
Sample260601-dcsfesby3w
SHA256 caa221b9d5d1fe3652238028862a7fb3c257626abb131f243e5cd208ef49b12f
MD5 179bc0dcf4975010aaf74364cfcb47eb
SHA1 e432c79ba713b821f1e052b5f2c3b68e203803f0
SHA512 b122b9aa171d23aa02bdbdb31b4d0233e42194bf83b165e3317aeae78e944b29f35b10bf100f98787f941451c4f9d7fd69c18fd0066f73041001679666f4223e
SSDEEP 12288:D2osnM0zKj5YFXtU3tcHKqaxLhAy/CuB3i9PQhw8hqld6QM9k:RaSi9PQhw8h6Q1k
TLSH
T1E1E52D82DB4064AFE039B7781AD747357BBAA02117B3065B6E5116B8BC6B3522F31FC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caa221b9d5d1fe3652238028862a7fb3c257626abb131f243e5cd208ef49b12f

File Explorer

caa221b9d5d1fe3652238028862a7fb3c257626abb131f243e5cd208ef49b12f

.exe 3.0MB

caa221b9d5d1fe3652238028862a7fb3c257626abb131f243e5cd208ef49b12f

IMPHASH fdf5110cea591b977b0dafe442f8e4f9
SHA256 caa221b9d5d1fe3652238028862a7fb3c257626abb131f243e5cd208ef49b12f
MD5 179bc0dcf4975010aaf74364cfcb47eb
SHA1 e432c79ba713b821f1e052b5f2c3b68e203803f0
SHA512 b122b9aa171d23aa02bdbdb31b4d0233e42194bf83b165e3317aeae78e944b29f35b10bf100f98787f941451c4f9d7fd69c18fd0066f73041001679666f4223e
SSDEEP 12288:D2osnM0zKj5YFXtU3tcHKqaxLhAy/CuB3i9PQhw8hqld6QM9k:RaSi9PQhw8h6Q1k
TLSH
T1E1E52D82DB4064AFE039B7781AD747357BBAA02117B3065B6E5116B8BC6B3522F31FC4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

199398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathFileExistsA

comctl32

CreateToolbarEx ord17 ord6 ord2

winmm

waveOutGetNumDevs PlaySoundA

kernel32

LoadLibraryExA GetVersionExA WinExec CloseHandle GlobalReAlloc lstrcpyA InterlockedIncrement InitializeCriticalSection LeaveCriticalSection SetThreadPriority InterlockedExchange EnterCriticalSection GetModuleHandleA DeleteCriticalSection ResumeThread GetFileSize GetTimeFormatA GetDateFormatA Beep ReadFile SetCurrentDirectoryA GetTickCount ExitThread GetCurrentThreadId GetLastError CreateThread GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer TlsAlloc TlsGetValue GetModuleFileNameA TlsFree GetModuleHandleW SetLastError InterlockedDecrement ExitProcess HeapFree Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LoadLibraryW RtlUnwind HeapAlloc HeapReAlloc GetStringTypeW SetStdHandle WriteConsoleW IsProcessorFeaturePresent HeapSize CreateFileW LockResource GetLocalTime GetPrivateProfileStringA GlobalFree GetProcAddress CreateDirectoryA FlushFileBuffers GlobalUnlock lstrcatA SizeofResource GlobalAlloc WriteFile GlobalLock LoadResource FreeLibrary lstrlenA SetFilePointer lstrcmpA FindResourceA CreateFileA TlsSetValue

user32

GetDlgItem GetMenuState TranslateAcceleratorA EnableMenuItem CreateWindowExA GetWindowLongA CharUpperBuffA InvalidateRect MessageBoxA SetWindowLongA GetMenu TranslateMessage IsDialogMessageA RegisterWindowMessageA SendMessageA SetFocus GetClientRect wsprintfA CallNextHookEx LoadIconA LoadStringA SetForegroundWindow GetSubMenu SendDlgItemMessageA PostQuitMessage RegisterClassExA CreateDialogParamA GetWindowRect GetMessageA SetCursor DestroyWindow ClientToScreen ReleaseCapture CheckRadioButton DrawMenuBar IsDlgButtonChecked CheckDlgButton GetSysColor RedrawWindow ReleaseDC EndDialog GetForegroundWindow GetDC BeginPaint KillTimer SetCapture SetTimer EndPaint SetCaretPos CreateCaret GetCursorPos DestroyCaret SetScrollPos SetScrollRange ShowCaret CharPrevA MessageBeep GetFocus ScreenToClient HideCaret SetWindowsHookExA DestroyCursor SetWindowPos LoadAcceleratorsA ShowWindow GetActiveWindow PostMessageA DispatchMessageA UnhookWindowsHookEx GetSystemMetrics SetWindowTextA UpdateWindow EnableWindow CallWindowProcA FindWindowA LoadCursorA GetDlgItemTextA DialogBoxParamA SetDlgItemTextA CheckMenuItem MoveWindow GetAsyncKeyState DefWindowProcA

gdi32

EndDoc StartDocA SetTextColor GetDeviceCaps DeleteDC StartPage LineTo EndPage MoveToEx SetBkColor SelectObject TextOutA CreateDCA GetTextMetricsA GetStockObject

comdlg32

GetSaveFileNameA PrintDlgA GetOpenFileNameA

advapi32

RegCloseKey RegSetValueExA RegQueryValueExA RegCreateKeyExA RegOpenKeyExA

Sharing

General

Malware Config

Signatures

File Explorer

caa221b9d5d1fe3652238028862a7fb3c257626abb131f243e5cd208ef49b12f

shlwapi

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

generic