Internet Explorer 1[.]exe

General

Target
Internet Explorer 1.exe
Size 1.0MB
Sample260707-bnt3aacs2n
SHA256 c26a279d5d4dd95b9f43ea7634546911f9cea65d07e90f0c30ee659af67b4a73
MD5 adb4c9f286600bd2889d3f756a76318d
SHA1 ffcfc881a7f59f57d32a33f35b9e09300be0ba7f
SHA512 4ed6de706b9c1179e9f8ffdc111c1a7b376e249f98bd9f6288f11c16cd9d014c7b30ed70a08f37e922291d0af5bab4e7226a03c8aa63ec0399ffe602c2af11b1
SSDEEP 24576:QPVh+WCFFO9tqRdgMBOyA3a8NAjPpwtDGjZ67CACI:QD+fFUqRyMwK8NAjPp2DX7C
TLSH
T10C352362E4C2984BFCA617BD0AF659771D753CB35AC7A3E3D1403A600DB27A4122877E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Internet Explorer 1.exe

File Explorer

Internet Explorer 1.exe

.exe 1.0MB

Internet Explorer 1.exe

IMPHASH 8130330c63b05fa48df56e1c53e9aa65
SHA256 c26a279d5d4dd95b9f43ea7634546911f9cea65d07e90f0c30ee659af67b4a73
MD5 adb4c9f286600bd2889d3f756a76318d
SHA1 ffcfc881a7f59f57d32a33f35b9e09300be0ba7f
SHA512 4ed6de706b9c1179e9f8ffdc111c1a7b376e249f98bd9f6288f11c16cd9d014c7b30ed70a08f37e922291d0af5bab4e7226a03c8aa63ec0399ffe602c2af11b1
SSDEEP 24576:QPVh+WCFFO9tqRdgMBOyA3a8NAjPpwtDGjZ67CACI:QD+fFUqRyMwK8NAjPp2DX7C
TLSH
T10C352362E4C2984BFCA617BD0AF659771D753CB35AC7A3E3D1403A600DB27A4122877E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

9711

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpA RtlMoveMemory ReadFile WriteFile GlobalAlloc SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GlobalFree SetFileAttributesA LoadResource CloseHandle CreateFileA SizeofResource FreeResource DeleteFileA GetLastError GetExitCodeProcess CreateProcessA Sleep GetExitCodeThread CreateThread GetTempPathA GetVersionExA lstrlenA lstrcpyA GetDiskFreeSpaceA FindResourceA lstrcatA GetModuleHandleA WideCharToMultiByte SetStdHandle EnterCriticalSection LeaveCriticalSection VirtualAlloc VirtualFree InitializeCriticalSection TlsGetValue FlushFileBuffers TlsAlloc TlsSetValue GetCurrentThreadId GetFileType GetStdHandle GetCPInfo GetOEMCP GetACP GetModuleFileNameA UnhandledExceptionFilter RtlUnwind GetCommandLineA GetEnvironmentStrings ExitProcess GetStartupInfoA GetVersion

gdi32

GetStockObject GetDeviceCaps

user32

LoadIconA ReleaseDC LoadCursorA RegisterClassA CreateWindowExA CreateDialogParamA AdjustWindowRect MoveWindow GetDesktopWindow TranslateMessage DestroyWindow ShowWindow GetSystemMenu EnableMenuItem DefWindowProcA PeekMessageA PostQuitMessage DispatchMessageA GetDlgItem MsgWaitForMultipleObjects SetWindowTextA MessageBoxA SendMessageA LoadStringA SetWindowPos GetWindowRect GetDC UpdateWindow

comctl32

ord17

Name

.text

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1001KB

Virtual Size

1004KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Internet Explorer 1.exe

kernel32

gdi32

user32

comctl32

generic