Regshot-x64-ANSI[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Regshot-x64-ANSI.exe
Size 129KB
Sample260620-eael8acz8m
SHA256 d41b926d62c3a99fae12bb0116f2cdf5f382a883d508bb7feb7734c09682004c
MD5 e92608fe80698293858002f6a7e9293b
SHA1 a3b44f26a6902416d47b2128a1a919a3307e091a
SHA512 4961f7724510e4c6edc0b757d02fdfd4e0b784f2242a8f3758c26136fafd74191e6f2c61848827050e4f8c4606f8e28795ad2b77876a03356cd7264eabf295a0
SSDEEP 3072:ojsxDMph+uO+jmvuwcNEY5IQ+h9QNM4tmK9s3l5JovFA9:ow1raQXh94qOvFA
TLSH
T1E0D37D6AB2E450F8C843D2B9C9E5AA53E3B134290F3567CF172896995F336D0FD2A350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Regshot-x64-ANSI.exe

File Explorer

Regshot-x64-ANSI.exe

.exe 129KB

Regshot-x64-ANSI.exe

IMPHASH a597cfa78bcc21ea2d268c231c5df623
SHA256 d41b926d62c3a99fae12bb0116f2cdf5f382a883d508bb7feb7734c09682004c
MD5 e92608fe80698293858002f6a7e9293b
SHA1 a3b44f26a6902416d47b2128a1a919a3307e091a
SHA512 4961f7724510e4c6edc0b757d02fdfd4e0b784f2242a8f3758c26136fafd74191e6f2c61848827050e4f8c4606f8e28795ad2b77876a03356cd7264eabf295a0
SSDEEP 3072:ojsxDMph+uO+jmvuwcNEY5IQ+h9QNM4tmK9s3l5JovFA9:ow1raQXh94qOvFA
TLSH
T1E0D37D6AB2E450F8C843D2B9C9E5AA53E3B134290F3567CF172896995F336D0FD2A350
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

48064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\VSout\bin\VS2008\Regshot\x64\Release\Regshot-x64-ANSI.pdb

kernel32

FindClose FindNextFileA GetFileTime CloseHandle GetFileInformationByHandle GetPrivateProfileStringA GetPrivateProfileSectionNamesA GetPrivateProfileSectionA GetComputerNameA SystemTimeToFileTime CompareFileTime ReadFile GetLastError GetSystemTime GetPrivateProfileIntA WritePrivateProfileStringA GetProcessHeap GetWindowsDirectoryA GetCurrentDirectoryA GetTempPathA FlushFileBuffers FindFirstFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle HeapReAlloc InitializeCriticalSectionAndSpinCount LoadLibraryA GetConsoleMode GetConsoleCP GetLocaleInfoA EnterCriticalSection LeaveCriticalSection GetStringTypeW GetStringTypeA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileAttributesA WriteFile WideCharToMultiByte GetTickCount HeapFree HeapAlloc SetFilePointer GetFileSize HeapSize CreateFileA HeapCreate HeapSetInformation DeleteCriticalSection GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc LCMapStringA MultiByteToWideChar LCMapStringW GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA RtlUnwindEx FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType

user32

GetMessageA GetWindowRect CreateDialogParamA PostQuitMessage TrackPopupMenu SetClassLongPtrA LoadIconA IsDialogMessageA TranslateMessage DispatchMessageA SetWindowTextA DestroyMenu SetFocus CreatePopupMenu AppendMenuA SetMenuDefaultItem EnableWindow LoadCursorA SetCursor MessageBeep SendMessageA GetDlgItem ShowWindow MessageBoxA SetDlgItemTextA SendDlgItemMessageA PeekMessageA UpdateWindow GetDlgItemTextA EnableMenuItem

comdlg32

GetSaveFileNameA GetOpenFileNameA

advapi32

GetUserNameA RegEnumValueA RegQueryInfoKeyA RegOpenKeyExA RegEnumKeyExA RegCloseKey

shell32

SHGetPathFromIDListA SHBrowseForFolderA ShellExecuteA