009433e9bac780c6cdd611fb32fa570b34aa2843b1a1595218ee2a1479343eca

Sharing

Copy URL Twitter E-mail

General

Target
009433e9bac780c6cdd611fb32fa570b34aa2843b1a1595218ee2a1479343eca
Size 92.2MB
Sample260701-d3mmvsfv4s
SHA256 009433e9bac780c6cdd611fb32fa570b34aa2843b1a1595218ee2a1479343eca
MD5 b4453cff5c7696a8ec964f7ab29b9eb5
SHA1 b1cdfa9351d747dc701c6ec8a0c4c723fb6520d1
SHA512 3f680a6dc3681b614bcef0a859ac05c987fd3476f89704bd3d05269696780d6a1713ad93cf93a1f7fd198106544142e262e93451949672e39ef4f96ebb152657
SSDEEP 1572864:G0OqzBTixYKxEsmZh04r2mLiULJ9fcwboIQb8k8L5Rf4Z4eHbzrcd/wzj4eCDz:/DBTbUEss0COULJ9fcwboIg8k8L55hdL
TLSH
T1E9283391A1B54AF3CDE39937B838D6A01A785C58C434467FF399BB4B0E7438042A65BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
009433e9bac780c6cdd611fb32fa570b34aa2843b1a1595218ee2a1479343eca

File Explorer

009433e9bac780c6cdd611fb32fa570b34aa2843b1a1595218ee2a1479343eca

.exe 92.2MB

009433e9bac780c6cdd611fb32fa570b34aa2843b1a1595218ee2a1479343eca

IMPHASH 7c7b72fdd5b7fbcb1ab044da94dc98a5
SHA256 009433e9bac780c6cdd611fb32fa570b34aa2843b1a1595218ee2a1479343eca
MD5 b4453cff5c7696a8ec964f7ab29b9eb5
SHA1 b1cdfa9351d747dc701c6ec8a0c4c723fb6520d1
SHA512 3f680a6dc3681b614bcef0a859ac05c987fd3476f89704bd3d05269696780d6a1713ad93cf93a1f7fd198106544142e262e93451949672e39ef4f96ebb152657
SSDEEP 1572864:G0OqzBTixYKxEsmZh04r2mLiULJ9fcwboIQb8k8L5Rf4Z4eHbzrcd/wzj4eCDz:/DBTbUEss0COULJ9fcwboIg8k8L55hdL
TLSH
T1E9283391A1B54AF3CDE39937B838D6A01A785C58C434467FF399BB4B0E7438042A65BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\source\source.YV\111783\Release_wdautoex_13\WX\Desktop_x86_32\Release\WdAutoEx.pdb

comctl32

ord17

mpr

WNetOpenEnumW WNetCloseEnum WNetEnumResourceW WNetGetUniversalNameW

uxtheme

SetWindowTheme

kernel32

WideCharToMultiByte MultiByteToWideChar InterlockedExchangeAdd InterlockedIncrement GetLastError LoadLibraryW GetFileInformationByHandle GetLogicalDriveStringsW GetVolumeInformationW WriteFile ReadFile SetFilePointer LockFile LockFileEx UnlockFile UnlockFileEx FlushFileBuffers SetEndOfFile SetFileValidData SetErrorMode SetFileTime SetLastError GetFileTime SystemTimeToFileTime FileTimeToSystemTime CreateFileW Sleep DeleteFileW GetFileAttributesW CreateDirectoryW RemoveDirectoryW FindFirstFileW FindClose SetFileAttributesW FindFirstFileExW FindNextFileW GetTempPathW GetCurrentDirectoryW GetTempFileNameW GetFullPathNameW GetDriveTypeW QueryDosDeviceW FreeLibrary OpenProcess TerminateProcess GetModuleFileNameW CompareStringW CompareStringA GetPrivateProfileStringW GetTimeZoneInformation HeapSize InterlockedDecrement GetVersionExW GetCurrentProcess CreateProcessW InitializeCriticalSection DeleteCriticalSection LCMapStringW EnterCriticalSection LeaveCriticalSection TlsAlloc TlsFree GetCurrentThreadId TlsGetValue TlsSetValue GetPrivateProfileIntW SetEnvironmentVariableW GetExitCodeProcess GetProcessHeap SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA WriteConsoleW HeapReAlloc SetStdHandle DecodePointer GetStringTypeW HeapAlloc HeapFree GetACP GetStdHandle GetModuleFileNameA GetModuleHandleExW ExitProcess SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType RtlUnwind LoadLibraryExW InitializeCriticalSectionAndSpinCount RaiseException InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId LocalFree LockResource LoadResource FindResourceW FormatMessageW GetProcAddress MulDiv GetModuleHandleW CloseHandle GetConsoleCP GetConsoleMode SetFilePointerEx QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent

user32

GetDlgItemTextW IsDlgButtonChecked CheckDlgButton GetDlgItem SetDlgItemTextW SetWindowPos GetParent DialogBoxParamW EndDialog IsWindow CharUpperBuffW MessageBoxW LoadStringW FillRect DestroyWindow DrawTextW UpdateWindow ShowWindow SendMessageW GetClientRect GetSystemMetrics CreateWindowExW ReleaseDC GetWindowDC GetDesktopWindow RegisterClassW LoadIconW DefWindowProcW SendDlgItemMessageW SetWindowTextW CharUpperW GetDC

gdi32

GetStockObject SetROP2 LineTo MoveToEx CreatePen DeleteObject SelectObject CreateFontIndirectW SetTextColor SetBkMode GetDeviceCaps CreateSolidBrush

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW ShellExecuteW ShellExecuteExW

ole32

OleInitialize

Sharing

General

Malware Config

Signatures

File Explorer

009433e9bac780c6cdd611fb32fa570b34aa2843b1a1595218ee2a1479343eca

comctl32

mpr

uxtheme

kernel32

user32

gdi32

advapi32

shell32

ole32

generic