9874bb58ccac9dc9a808ca221e3de598353b13a15b2e170a7ebf615e4869ecbe

Sharing

Copy URL Twitter E-mail

General

Target
9874bb58ccac9dc9a808ca221e3de598353b13a15b2e170a7ebf615e4869ecbe
Size 829KB
Sample260718-t321jsfx9m
SHA256 9874bb58ccac9dc9a808ca221e3de598353b13a15b2e170a7ebf615e4869ecbe
MD5 19477ffe3ff33ab3fa38b2da24e6df89
SHA1 97eba9370ad233d23405daae88d879f66ad7eea7
SHA512 cd05260d885c62b468a34a74f5f3d297cf2af54fdef883b43dc5962819252cbc3bbeaddbfe4aad648eeb9c04d6177a40a5afcfac22041c4cfadbacc3e2e2cc9f
SSDEEP 12288:lxvW1cOc64k+DqA+fkBHvrcVvUFLeLDKhPuwMBy1wqes46l2:lxe1cOh1a+2HvuSeLIPfp1lfhY
TLSH
T145057E6ABFA842F9D077C139C9528656F3F278450A759B1F12E4436F2F236A05F2E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9874bb58ccac9dc9a808ca221e3de598353b13a15b2e170a7ebf615e4869ecbe

File Explorer

9874bb58ccac9dc9a808ca221e3de598353b13a15b2e170a7ebf615e4869ecbe

.exe 829KB

9874bb58ccac9dc9a808ca221e3de598353b13a15b2e170a7ebf615e4869ecbe

IMPHASH de19f7cdec15d823900164eb719f0398
SHA256 9874bb58ccac9dc9a808ca221e3de598353b13a15b2e170a7ebf615e4869ecbe
MD5 19477ffe3ff33ab3fa38b2da24e6df89
SHA1 97eba9370ad233d23405daae88d879f66ad7eea7
SHA512 cd05260d885c62b468a34a74f5f3d297cf2af54fdef883b43dc5962819252cbc3bbeaddbfe4aad648eeb9c04d6177a40a5afcfac22041c4cfadbacc3e2e2cc9f
SSDEEP 12288:lxvW1cOc64k+DqA+fkBHvrcVvUFLeLDKhPuwMBy1wqes46l2:lxe1cOh1a+2HvuSeLIPfp1lfhY
TLSH
T145057E6ABFA842F9D077C139C9528656F3F278450A759B1F12E4436F2F236A05F2E321
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

503908

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

DeleteFileW GetWindowsDirectoryW GetCurrentProcessId GetTickCount FindFirstFileW FindNextFileW FindClose GetFileAttributesW GetModuleHandleA GetLogicalDriveStringsW ReadFile WriteFile DeviceIoControl SetFilePointer SetEndOfFile GetFileSize GetFileInformationByHandle GetVolumeInformationW GetDiskFreeSpaceW GetDriveTypeW GetCurrentProcess FileTimeToSystemTime GetProcessAffinityMask GetSystemInfo GlobalMemoryStatusEx GetSystemTimeAsFileTime GetStdHandle WaitForMultipleObjects QueryPerformanceCounter SetProcessAffinityMask UnmapViewOfFile MapViewOfFile IsProcessorFeaturePresent GetCommandLineW GetConsoleMode GetLogicalDrives GetFileSizeEx Sleep CreateFileMappingW GetFullPathNameW ExpandEnvironmentStringsW GetUserDefaultUILanguage SetErrorMode CreateMutexW ReleaseMutex GetACP OpenProcess AttachConsole GetCurrentThread QueryPerformanceFrequency GlobalAlloc GetNativeSystemInfo GetLocalTime GetThreadContext GlobalLock FreeLibrary SetFileAttributesW GetComputerNameW CreateProcessW GetFileType SetProcessWorkingSetSize GlobalUnlock MulDiv HeapFree TerminateProcess HeapAlloc GetProcessHeap GetExitCodeThread HeapSize WriteConsoleW SetFilePointerEx SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW GetStringTypeW HeapReAlloc GetConsoleCP FlushFileBuffers ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RaiseException RtlPcToFileHeader RtlUnwindEx VirtualProtect InitializeSListHead GetStartupInfoW IsDebuggerPresent WaitForSingleObjectEx InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext LoadLibraryW MultiByteToWideChar GetCurrentThreadId CreateFileW GetTempPathW SetLastError CreateDirectoryW LCMapStringW WideCharToMultiByte GetModuleFileNameW CreateSemaphoreW ResetEvent CloseHandle SetEvent GetLastError CreateEventW WaitForSingleObject InitializeCriticalSection ReleaseSemaphore DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryExW GetSystemDirectoryW GetModuleHandleW GetProcAddress VirtualAlloc ReplaceFileW VirtualFree

user32

DrawTextW PostQuitMessage SystemParametersInfoW DialogBoxParamW LoadImageW ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow wsprintfW CharUpperW GetMessageW DefWindowProcW ModifyMenuW ShowWindowAsync CallWindowProcW PostMessageW GetMenu DestroyWindow GetDC IsWindowVisible SetWindowPos MessageBoxW CheckRadioButton MessageBoxExW EnumChildWindows SetWindowLongPtrW FillRect ScreenToClient SendMessageW EndDialog GetSystemMetrics UnregisterClassW SetWindowTextW CreatePopupMenu RegisterClassExW IsWindow OpenClipboard DispatchMessageW DestroyIcon ClientToScreen CloseClipboard EmptyClipboard SetDlgItemTextW GetDlgItemTextW IsDlgButtonChecked SetLayeredWindowAttributes TranslateMessage LoadIconW LoadCursorW SetClipboardData TrackPopupMenuEx GetClientRect GetDlgItem AppendMenuW CreateWindowExW

gdi32

SelectObject CreateFontW GetStockObject GetDeviceCaps SetTextColor SetBkMode DeleteObject CreateSolidBrush CreateFontIndirectW

comdlg32

GetSaveFileNameW

advapi32

StartServiceW AdjustTokenPrivileges LookupPrivilegeValueW SystemFunction036 RegCloseKey CloseServiceHandle OpenSCManagerW RegEnumKeyExW OpenProcessToken RegOpenKeyExW OpenServiceW QueryServiceStatusEx RegQueryValueExW

shell32

CommandLineToArgvW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW DragFinish DragQueryFileW

ole32

CoInitializeEx IIDFromString CoTaskMemFree CoCreateInstance CoUninitialize StringFromGUID2

oleaut32

SysAllocString VariantCopy SysAllocStringLen VariantClear SysFreeString

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

newdev

UpdateDriverForPlugAndPlayDevicesW

comctl32

ImageList_Create ImageList_ReplaceIcon ord410 InitCommonControlsEx ImageList_SetOverlayImage ImageList_Destroy ord413

setupapi

CM_Uninstall_DevNode SetupDiEnumDeviceInfo CM_Get_Parent SetupDiGetClassDevsW CM_Disable_DevNode SetupDiGetClassDescriptionW CM_Get_DevNode_Registry_PropertyW SetupDiCallClassInstaller CM_Get_Child CM_Get_Device_IDW CM_Open_DevNode_Key CM_Get_Sibling CM_Locate_DevNodeW SetupUninstallOEMInfW CM_Reenumerate_DevNode CM_Open_Class_KeyW CM_Enable_DevNode CM_Get_Device_ID_List_SizeW CM_Get_DevNode_Status SetupDiLoadClassIcon CM_Get_Device_ID_ListW SetupDiDestroyDeviceInfoList

Sharing

General

Malware Config

Signatures

File Explorer

9874bb58ccac9dc9a808ca221e3de598353b13a15b2e170a7ebf615e4869ecbe

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

version

newdev

comctl32

setupapi

generic