77e3253cf2fb344e0fc397a36fa8f926c6678b1abdd9a12117a2a341aa60ff13[.]exe

General

Target
77e3253cf2fb344e0fc397a36fa8f926c6678b1abdd9a12117a2a341aa60ff13.exe
Size 333KB
Sample260608-llymssbv8k
SHA256 77e3253cf2fb344e0fc397a36fa8f926c6678b1abdd9a12117a2a341aa60ff13
MD5 b9330ad7159273ca7c784c9ca3cc9d6d
SHA1 c0940288008b310b6ec52bbf91c428d5d4e06058
SHA512 5fd25f2ffb58a4a1a29e62c090e325850d51b20cb427a3cb08616fd78ca3e7a4de6333ac5720f5afd3b6918a49a34449dc759bb9e2b3cd6506de756d8d28b3f6
SSDEEP 6144:T6YaTDvpL7IF/Kz8plA4omkla3VbwXDhAYSzf5U:TCIvplsvla3VENABzfG
TLSH
T1A5745B45B6A40CFDE967827CC9A34A06D7B2B8560770EBCF03A046965F277D09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77e3253cf2fb344e0fc397a36fa8f926c6678b1abdd9a12117a2a341aa60ff13.exe

File Explorer

77e3253cf2fb344e0fc397a36fa8f926c6678b1abdd9a12117a2a341aa60ff13.exe

.exe 333KB

77e3253cf2fb344e0fc397a36fa8f926c6678b1abdd9a12117a2a341aa60ff13.exe

IMPHASH d04feef9f2f0dd0a18187fe3826aaf2a
SHA256 77e3253cf2fb344e0fc397a36fa8f926c6678b1abdd9a12117a2a341aa60ff13
MD5 b9330ad7159273ca7c784c9ca3cc9d6d
SHA1 c0940288008b310b6ec52bbf91c428d5d4e06058
SHA512 5fd25f2ffb58a4a1a29e62c090e325850d51b20cb427a3cb08616fd78ca3e7a4de6333ac5720f5afd3b6918a49a34449dc759bb9e2b3cd6506de756d8d28b3f6
SSDEEP 6144:T6YaTDvpL7IF/Kz8plA4omkla3VbwXDhAYSzf5U:TCIvplsvla3VENABzfG
TLSH
T1A5745B45B6A40CFDE967827CC9A34A06D7B2B8560770EBCF03A046965F277D09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11404

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shlwapi

PathFindFileNameA StrStrA

advapi32

RegCreateKeyExW RegSetValueExW RegCloseKey AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

kernel32

SetFilePointerEx WriteConsoleW CreateFileW SetLastError SetStdHandle CreateRemoteThread VirtualProtectEx VirtualAllocEx WriteProcessMemory GetCurrentProcess Process32First WaitForSingleObject OpenProcess Sleep GetModuleFileNameW GetLastError lstrcmpiA Process32Next CreateToolhelp32Snapshot CloseHandle EncodePointer DecodePointer GetCommandLineW IsDebuggerPresent IsProcessorFeaturePresent ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar HeapSize RtlUnwindEx GetStdHandle WriteFile HeapFree HeapAlloc RtlPcToFileHeader RaiseException GetCurrentThreadId GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection InitOnceExecuteOnce GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree TerminateProcess GetModuleHandleW EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc OutputDebugStringW LoadLibraryW WideCharToMultiByte LCMapStringEx GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode

Sharing