3001b4bbebc1e2cfa74f3cc9bd7a3512e90898760002b264e7c941c79225b1f2

Sharing

Copy URL Twitter E-mail

General

Target
3001b4bbebc1e2cfa74f3cc9bd7a3512e90898760002b264e7c941c79225b1f2
Size 490KB
Sample260703-elfzesf17j
SHA256 3001b4bbebc1e2cfa74f3cc9bd7a3512e90898760002b264e7c941c79225b1f2
MD5 b1de04a5349f5c4994a6ccc19f130e53
SHA1 b5e38146fd42a27ab39265d729f10dd208411200
SHA512 93bb7cd1ce6bb8a70f53017b41244e329d154ff87d5e0e90a1795c64b4c5a66eb5c5db88d63efb86d09a3bfeff3f56c037df6d5abbab76c7427945f45d2ce230
SSDEEP 12288:ZtmhKaYlpQ/anePeOvFOzYADkKw/2SrydkPWMB0hwqd5sOYxMK9p5aI5QO:Gh5epSsePeOvFOzYADkKXSrydkPWMB0k
TLSH
T174B47E26A74105FCE863C178CE979553E732745907B1EEEF1B9088A56F235A0BF39B02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3001b4bbebc1e2cfa74f3cc9bd7a3512e90898760002b264e7c941c79225b1f2

File Explorer

3001b4bbebc1e2cfa74f3cc9bd7a3512e90898760002b264e7c941c79225b1f2

.exe 490KB

3001b4bbebc1e2cfa74f3cc9bd7a3512e90898760002b264e7c941c79225b1f2

IMPHASH 145185af568d28af956e1beae76ebc6f
SHA256 3001b4bbebc1e2cfa74f3cc9bd7a3512e90898760002b264e7c941c79225b1f2
MD5 b1de04a5349f5c4994a6ccc19f130e53
SHA1 b5e38146fd42a27ab39265d729f10dd208411200
SHA512 93bb7cd1ce6bb8a70f53017b41244e329d154ff87d5e0e90a1795c64b4c5a66eb5c5db88d63efb86d09a3bfeff3f56c037df6d5abbab76c7427945f45d2ce230
SSDEEP 12288:ZtmhKaYlpQ/anePeOvFOzYADkKw/2SrydkPWMB0hwqd5sOYxMK9p5aI5QO:Gh5epSsePeOvFOzYADkKXSrydkPWMB0k
TLSH
T174B47E26A74105FCE863C178CE979553E732745907B1EEEF1B9088A56F235A0BF39B02
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

211892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord410 ord413 InitCommonControlsEx

shell32

SHCreateDirectoryExA SHBrowseForFolderA SHGetPathFromIDListA

gdi32

TextOutA LineTo CreateFontA CreatePen CreateSolidBrush DeleteObject SetTextColor SelectObject SetBkColor SetBkMode MoveToEx

user32

LoadCursorA FillRect ScreenToClient GetCursorPos MessageBoxA GetWindowRect GetClientRect GetWindowTextLengthA SetWindowTextA InvalidateRect EndPaint BeginPaint SetForegroundWindow UpdateWindow DrawTextA TrackPopupMenu AppendMenuA DestroyMenu CreatePopupMenu EnableWindow KillTimer SetTimer SetFocus GetDlgItemInt GetDlgItem SetWindowPos ShowWindow DestroyWindow IsWindow CreateWindowExA RegisterClassExA PostQuitMessage DefWindowProcA PostMessageA SendMessageA GetWindow DispatchMessageA TranslateMessage GetMessageA GetWindowTextA

comdlg32

GetOpenFileNameA GetSaveFileNameA

ole32

CoTaskMemFree

kernel32

GetModuleHandleW GetModuleFileNameW InitializeSListHead GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DecodePointer EncodePointer DeleteCriticalSection GetUserDefaultLCID GetSystemDefaultLCID UnmapViewOfFile MapViewOfFile CreateFileMappingW GetSystemDirectoryW GetTickCount GetSystemTimeAsFileTime GetSystemInfo IsProcessorFeaturePresent GetCurrentThreadId TerminateProcess GetCurrentProcessId GetCurrentProcess InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection HeapFree HeapReAlloc HeapAlloc QueryPerformanceCounter SetLastError RaiseException AreFileApisANSI GetDllDirectoryW MultiByteToWideChar CopyFileA FindResourceA SizeofResource LockResource LoadResource GetProcAddress GetModuleHandleA GetModuleFileNameA FreeLibrary CreateProcessA CreateThread GetExitCodeProcess LCMapStringW WideCharToMultiByte Sleep WaitForSingleObject DeviceIoControl CreatePipe GetLastError SetHandleInformation GetVolumeInformationA GetTempPathA SetFileAttributesA CreateDirectoryA CreateFileA DeleteFileA FindClose FindFirstFileA FindNextFileA GetFileAttributesA RemoveDirectoryA

ucrtbase

_purecall __std_terminate __std_exception_copy __std_exception_destroy _CxxThrowException __CxxFrameHandler3 memcmp memcpy memmove memset __C_specific_handler __uncaught_exception __CxxFrameHandler4 __current_exception __current_exception_context _set_new_mode _invoke_watson iswdigit isdigit isspace toupper tolower wcscpy_s strcpy_s free _wtoi atof atoi strtoul _strtoui64 fopen_s fclose fgets fwrite _pclose _popen __stdio_common_vfprintf __stdio_common_vsprintf_s strlen wcslen malloc _lock_locales _unlock_locales calloc abort setlocale __pctype_func isupper ___lc_locale_name_func ___lc_codepage_func _wcsdup islower __strncnt terminate _callnewh _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type __setusermatherr _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit _exit _set_fmode _c_exit _register_thread_local_exe_atexit_callback _configthreadlocale __p__commode

Sharing

General

Malware Config

Signatures

File Explorer

3001b4bbebc1e2cfa74f3cc9bd7a3512e90898760002b264e7c941c79225b1f2

comctl32

shell32

gdi32

user32

comdlg32

ole32

kernel32

ucrtbase

generic