cslol-manager-windows[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
cslol-manager-windows.exe
Size 35.6MB
Sample260624-achpfahs2t
SHA256 f528db8cf63ebd580886c747bff7ca2de69644307724738eea3de22ce8ea04ac
MD5 94828dea61bde4f536a270df53bf27cf
SHA1 92624dc40f95d4910b3536bd9436137f852c01e4
SHA512 262ada22ac90cc87180aa1df1550b87e2bcc3d65bfffbe46c323f15d7783885ccd548677202ab93af4ef2f35404b0d3b8273a46b0bfe6b779c7ccec4606bd146
SSDEEP 786432:HUL+XrZJrIp74hxDPjlcMlSQqF52YJrPZ14gw72cSTR/ZrYhCVXL:H++bnI74hxXTlSQqBlPZ1g0h8hgXL
TLSH
T1BF8733103BB1D69DF01B03FACDA8DEF12FA991611F7F92432B85095C2765DF89AA41E0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cslol-manager-windows.exe

File Explorer

cslol-manager-windows.exe

.exe 35.6MB

cslol-manager-windows.exe

IMPHASH eb0cbb54ca401e820f6974e6548a4451
SHA256 f528db8cf63ebd580886c747bff7ca2de69644307724738eea3de22ce8ea04ac
MD5 94828dea61bde4f536a270df53bf27cf
SHA1 92624dc40f95d4910b3536bd9436137f852c01e4
SHA512 262ada22ac90cc87180aa1df1550b87e2bcc3d65bfffbe46c323f15d7783885ccd548677202ab93af4ef2f35404b0d3b8273a46b0bfe6b779c7ccec4606bd146
SSDEEP 786432:HUL+XrZJrIp74hxDPjlcMlSQqF52YJrPZ14gw72cSTR/ZrYhCVXL:H++bnI74hxXTlSQqBlPZ1g0h8hgXL
TLSH
T1BF8733103BB1D69DF01B03FACDA8DEF12FA991611F7F92432B85095C2765DF89AA41E0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

165452

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocStringLen SysAllocString VariantClear SysFreeString SysStringLen

ole32

CoUninitialize CoTaskMemFree CoCreateInstance CoInitialize OleInitialize

user32

CheckDlgButton IsDlgButtonChecked DestroyIcon EndDialog SetDlgItemTextW GetFocus SetFocus GetKeyState InvalidateRect SetWindowTextW EnableWindow PostMessageW MessageBoxW DialogBoxParamW SetWindowLongW SetTimer GetParent ShowWindow MoveWindow ScreenToClient GetDlgItem GetWindowRect MapDialogRect MonitorFromWindow GetMonitorInfoA SystemParametersInfoW GetWindowTextLengthW GetWindowTextW SendMessageW LoadStringW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard CharUpperW LoadIconW SetCursor LoadCursorW KillTimer GetWindowLongW

shell32

SHBrowseForFolderW SHGetFileInfoW SHGetPathFromIDListW

msvcrt

memset strlen _beginthreadex _except_handler3 ??1type_info@@UAE@XZ ?terminate@@YAXXZ __dllonexit _onexit _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp wcsstr free malloc memcpy memmove _purecall memcmp _CxxThrowException __CxxFrameHandler wcscmp

kernel32

GetStartupInfoA InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW ResetEvent SetEvent CreateEventW WaitForSingleObject GetVersion IsProcessorFeaturePresent VirtualFree VirtualAlloc SetPriorityClass WaitForMultipleObjects DeleteCriticalSection Sleep EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask GetModuleHandleW FileTimeToLocalFileTime FileTimeToSystemTime CompareFileTime GlobalFree GlobalAlloc SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetLogicalDriveStringsW GetFileAttributesW GetModuleHandleA GetProcAddress FindNextFileW FindFirstFileW FindClose GetStdHandle GetFileInformationByHandle GetTickCount GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW MoveFileW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime CloseHandle GetSystemDirectoryW FormatMessageW GetModuleFileNameW LoadLibraryExW GlobalLock GlobalUnlock MultiByteToWideChar GetLastError GetCommandLineW GetVersionExW LocalFree