b9050b56d4150427a9e0abd5bb15ffbb62ef3fcbd1a4478aa8d270f59249131e

Sharing

Copy URL Twitter E-mail

General

Target
b9050b56d4150427a9e0abd5bb15ffbb62ef3fcbd1a4478aa8d270f59249131e
Size 1.2MB
Sample260707-ne5tmsgx3z
SHA256 b9050b56d4150427a9e0abd5bb15ffbb62ef3fcbd1a4478aa8d270f59249131e
MD5 f50f1ff6af43bd6ec4fea1ba7044606d
SHA1 8d1eee84645e77b66fd956ed1274785611f0b9c2
SHA512 13ffe65bc3f93e736c7eaacb3fbda6b295cb70c5ff92a782122646713aea9a2394f881ed84df2ed3678940b5a41e6ae35e6cbcfdef43a7a99b2dcb09b81c2f7b
SSDEEP 24576:peZZ3Q5lG4eXSYtBSugfKpNBThtwgymoif:9lG4WNB5gCpLMmFf
TLSH
T13F45BF017807D429DF6F02754AA5E7A5A0B19CE04F2309BB76BCBC7DEA36181913772B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9050b56d4150427a9e0abd5bb15ffbb62ef3fcbd1a4478aa8d270f59249131e

File Explorer

b9050b56d4150427a9e0abd5bb15ffbb62ef3fcbd1a4478aa8d270f59249131e

.exe 1.2MB

b9050b56d4150427a9e0abd5bb15ffbb62ef3fcbd1a4478aa8d270f59249131e

IMPHASH 3ddd79244182686207773af3b98637f7
SHA256 b9050b56d4150427a9e0abd5bb15ffbb62ef3fcbd1a4478aa8d270f59249131e
MD5 f50f1ff6af43bd6ec4fea1ba7044606d
SHA1 8d1eee84645e77b66fd956ed1274785611f0b9c2
SHA512 13ffe65bc3f93e736c7eaacb3fbda6b295cb70c5ff92a782122646713aea9a2394f881ed84df2ed3678940b5a41e6ae35e6cbcfdef43a7a99b2dcb09b81c2f7b
SSDEEP 24576:peZZ3Q5lG4eXSYtBSugfKpNBThtwgymoif:9lG4WNB5gCpLMmFf
TLSH
T13F45BF017807D429DF6F02754AA5E7A5A0B19CE04F2309BB76BCBC7DEA36181913772B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

192058

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess HeapReAlloc HeapSize SetUnhandledExceptionFilter GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate IsBadWritePtr UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA LocalAlloc FormatMessageA GetACP GetLocalTime GetProfileStringA InterlockedExchange GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement Sleep LoadLibraryA CloseHandle WriteFile CreateFileA GetProcAddress GetComputerNameA GetVersion VirtualFree ReadFile VirtualAlloc GetFileSize lstrcmpA SetFilePointer SystemTimeToFileTime GetCurrentDirectoryA LocalFileTimeToFileTime CreateDirectoryA GetFileAttributesA SetFileTime LoadResource FindResourceA LockResource GlobalFree GlobalUnlock GlobalLock GetModuleHandleA lstrcpyA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA lstrcmpiA GlobalGetAtomNameA GetSystemTime GetTimeZoneInformation ExitProcess GetCommandLineA GetStartupInfoA HeapFree HeapAlloc RaiseException RtlUnwind GetTickCount SetErrorMode WritePrivateProfileStringA GetOEMCP GetCPInfo GetProcessVersion TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection SizeofResource GlobalFlags lstrcpynA SetEndOfFile FlushFileBuffers GetCurrentProcess GlobalAlloc GetCurrentThread MulDiv SetLastError lstrlenW GetCurrentThreadId GetModuleFileNameA WideCharToMultiByte InterlockedIncrement FreeLibrary lstrcatA LocalFree

user32

GetSysColorBrush PtInRect GetClassNameA InflateRect DestroyMenu LoadStringA GetMessageA TranslateMessage ValidateRect GetCursorPos SetCursor PostQuitMessage GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ClientToScreen CharNextA wvsprintfA GetDC ReleaseDC GetMenuCheckMarkDimensions GetMenuState SetMenuItemBitmaps CheckMenuItem EnableMenuItem ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked PostMessageA SendDlgItemMessageA MapWindowPoints GetSysColor PeekMessageA DispatchMessageA GetFocus SetFocus AdjustWindowRectEx ScreenToClient CopyRect IsWindowVisible GetTopWindow EnableWindow wsprintfA GetClientRect SendMessageA UnregisterClassA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect InvalidateRect MessageBoxA GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA RegisterClipboardFormatA PostThreadMessageA GetWindowTextA GetDlgCtrlID GetKeyState CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA DefDlgProcA IsWindowUnicode LoadIconA AppendMenuA GetSystemMenu DrawIcon GetSystemMetrics IsIconic BringWindowToTop GetWindowRect UpdateWindow LoadCursorA LoadBitmapA SetTimer IsWindowEnabled GetDlgItem GetWindowLongA GetParent DestroyWindow CreateDialogIndirectParamA IsWindow SetActiveWindow GetActiveWindow EndDialog GetNextDlgTabItem GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect RegisterWindowMessageA SetWindowPos SetWindowLongA GetWindow SetForegroundWindow GetForegroundWindow CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetLastActivePopup ModifyMenuA

gdi32

SelectObject SetBkMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect RestoreDC DeleteObject GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible ExtTextOutA Escape GetMapMode CreateFontIndirectA DPtoLP SaveDC GetStockObject PatBlt CreateBitmap SetBkColor SetTextColor GetClipBox CreateCompatibleDC BitBlt GetObjectA GetDeviceCaps GetTextMetricsA StartDocA DeleteDC EndDoc EndPage TextOutA CreateDIBitmap GetTextExtentPointA StartPage

comdlg32

PrintDlgA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegCloseKey RegCreateKeyExA RegOpenKeyExA RegSetValueExA

shell32

SHGetSpecialFolderPathA

comctl32

ord17 ImageList_Destroy

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleInitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard

oleaut32

VariantInit VariantClear SysFreeString SysAllocString VariantChangeType VariantCopy VarBstrFromCy GetErrorInfo

Sharing

General

Malware Config

Signatures

File Explorer

b9050b56d4150427a9e0abd5bb15ffbb62ef3fcbd1a4478aa8d270f59249131e

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

generic