372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e[.]exe

General

Target
372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e.exe
Size 468KB
Sample260706-m4c99ad121
SHA256 372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e
MD5 1d0902a4e57d99143db4d20def7e2fdb
SHA1 89532ee901054f2172d59cef1781f2558d41c01f
SHA512 21c1f24891f18bf8b46b2b06c2278191ea92c92250f56c7f032a44a273b9bce175078765275c5e3480a49887a9459067dbe94cd534f4789b7660764f884eff46
SSDEEP 6144:q1p3HAzqPUPejsNVRbIf7m6A5fBLT9XTj8Tu6eezwJ:q1p3H6CUPiKVRcf7lUzXcTus
TLSH
T15DA4F60167F58138F7F32F34AEB582A60977BEA9AC79D10D1348852D0E35AA4CA74737
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e.exe

File Explorer

372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e.exe

.exe 468KB

372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e.exe

IMPHASH 65737bf1326bdce1a3f7b46c6065a414
SHA256 372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e
MD5 1d0902a4e57d99143db4d20def7e2fdb
SHA1 89532ee901054f2172d59cef1781f2558d41c01f
SHA512 21c1f24891f18bf8b46b2b06c2278191ea92c92250f56c7f032a44a273b9bce175078765275c5e3480a49887a9459067dbe94cd534f4789b7660764f884eff46
SSDEEP 6144:q1p3HAzqPUPejsNVRbIf7m6A5fBLT9XTj8Tu6eezwJ:q1p3H6CUPiKVRcf7lUzXcTus
TLSH
T15DA4F60167F58138F7F32F34AEB582A60977BEA9AC79D10D1348852D0E35AA4CA74737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

49216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Source\openoffice\main\desktop\wntmsci12.pro\bin\loader2.pdb

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA FreeSid EqualSid GetTokenInformation OpenProcessToken AllocateAndInitializeSid RegQueryValueExW RegOpenKeyExW

msi

ord8 ord178 ord148 ord77 ord112 ord179 ord150 ord78 ord113

kernel32

SetEnvironmentVariableW SetEnvironmentVariableA CompareStringW CompareStringA GetProcessHeap SetEndOfFile CreateFileW HeapSize CreateFileA GetVersionExA lstrcmpA lstrlenA GetLastError CloseHandle GetCurrentProcess FreeLibrary GetProcAddress LoadLibraryA GetPrivateProfileSectionA GetFileAttributesA GetFullPathNameA GetSystemDirectoryA GetExitCodeProcess CreateProcessA lstrcmpiA CreateMutexA GetSystemInfo UnmapViewOfFile MapViewOfFile CreateFileMappingA GetModuleFileNameA GetCommandLineA FindClose FindNextFileA FindFirstFileA GetSystemDefaultLangID GetUserDefaultLangID lstrcmpW lstrlenW LoadLibraryW GetPrivateProfileSectionW GetFileAttributesW GetFullPathNameW GetSystemDirectoryW CreateProcessW lstrcmpiW CreateMutexW CreateFileMappingW GetModuleFileNameW GetCommandLineW FindNextFileW FindFirstFileW RtlUnwind RaiseException GetSystemTimeAsFileTime GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage HeapFree DeleteFileA DeleteFileW GetStartupInfoA HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetStdHandle WideCharToMultiByte GetTimeZoneInformation GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW Sleep ExitProcess GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetHandleCount GetFileType ReadFile HeapCreate HeapDestroy VirtualFree VirtualAlloc HeapReAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId SetConsoleCtrlHandler GetLocaleInfoW SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle InitializeCriticalSectionAndSpinCount InterlockedExchange

user32

TranslateMessage LoadStringW MessageBoxW CharNextW PeekMessageW DispatchMessageW LoadStringA MessageBoxA CharNextA MsgWaitForMultipleObjects DispatchMessageA PeekMessageA

Sharing