37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037

Sharing

Copy URL Twitter E-mail

General

Target
37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037
Size 451KB
Sample260716-th2jaacx6t
SHA256 37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037
MD5 e95ef33fdbbe6c2b72ee98317d5da752
SHA1 b876645b0f7e2b261e64aa8c7c09a4f56789814e
SHA512 8381cef29db0a5e602290cce35a69fb70d2a62512f42c5cdc1c25a66978592d0fe1403fd4ec270b3c71549be8dc601c684ae33d0ae23b540f1609a716f18027d
SSDEEP 6144:n8rVC8eNZ2+yiydIMCMnAKfEVMnDiIqkyoGXCkCqam60cg7LZjd27YOt+0y:n+C8F+W2TYEVcy7gATPZjdUPBy
TLSH
T13DA45A6327908CABC6495139C4E6AF34B52EA6B4172683F75F800755DA6AFCC1C31A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037

File Explorer

37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037

.exe 451KB

37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037

IMPHASH b0970b24479b7204f8a08125c90d8d3d
SHA256 37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037
MD5 e95ef33fdbbe6c2b72ee98317d5da752
SHA1 b876645b0f7e2b261e64aa8c7c09a4f56789814e
SHA512 8381cef29db0a5e602290cce35a69fb70d2a62512f42c5cdc1c25a66978592d0fe1403fd4ec270b3c71549be8dc601c684ae33d0ae23b540f1609a716f18027d
SSDEEP 6144:n8rVC8eNZ2+yiydIMCMnAKfEVMnDiIqkyoGXCkCqam60cg7LZjd27YOt+0y:n+C8F+W2TYEVcy7gATPZjdUPBy
TLSH
T13DA45A6327908CABC6495139C4E6AF34B52EA6B4172683F75F800755DA6AFCC1C31A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

151904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey

user32

MessageBoxA CharNextW LoadStringW MessageBoxW LoadStringW GetSystemMetrics CharUpperW

kernel32

Sleep VirtualFree VirtualAlloc HeapFree HeapAlloc GetProcessHeap lstrlenW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwindEx RtlUnwind RaiseException ExitProcess SwitchToThread GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue LocalFree LocalAlloc GetModuleHandleW FreeLibrary WriteFile WideCharToMultiByte WaitForSingleObject VirtualQuery SizeofResource SetEvent SetEnvironmentVariableW ResetEvent LockResource LoadResource IsValidLocale GetVersionExW GetThreadLocale GetTempPathW GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetFileAttributesW GetExitCodeProcess GetDiskFreeSpaceW GetCurrentProcessId GetCommandLineW GetCPInfo FreeResource FreeLibrary FindResourceW EnumCalendarInfoW DeleteFileW CreateProcessW CreateFileW CreateEventW CompareStringW CloseHandle

shfolder

SHGetFolderPathW

Name

.text

Size

146KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

36KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

512B

Virtual Size

396B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

109B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

404B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

275KB

Virtual Size

274KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037

oleaut32

advapi32

user32

kernel32

shfolder

generic