3a0d6ac769c2ed119918b4844425edc049285912e4a2e28a23aff1e468613a1f

General

Target
3a0d6ac769c2ed119918b4844425edc049285912e4a2e28a23aff1e468613a1f
Size 1.2MB
Sample260722-saqldabm71
SHA256 3a0d6ac769c2ed119918b4844425edc049285912e4a2e28a23aff1e468613a1f
MD5 b80b0c8b64e9340879843d09676fa43f
SHA1 39da885d33365a43fa5cd8e24c70dd316ec352f8
SHA512 e021a6be1866b66065396577acf47fa28321b1fbf2da831087466f39ed798f23c03b62b3b955e5748ae81dce73f44ab5977e0329b75256084e65039a82fb0255
SSDEEP 24576:SAiNVlm4qdMhZAeG0KZjA7Mn9GHZrSJw41TRPZRfDCCHehC4WoK8:PoVlB6f0m3cMw41jRfDCm4Wo
TLSH
T1CE45337CDD8AA81CD838E97ADBFC3F8DE78684D25DB4409A57419357300FA811E1AB47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a0d6ac769c2ed119918b4844425edc049285912e4a2e28a23aff1e468613a1f

File Explorer

3a0d6ac769c2ed119918b4844425edc049285912e4a2e28a23aff1e468613a1f

.exe 1.2MB

3a0d6ac769c2ed119918b4844425edc049285912e4a2e28a23aff1e468613a1f

IMPHASH 05ecba14ae6ba36d9d29826081033d8d
SHA256 3a0d6ac769c2ed119918b4844425edc049285912e4a2e28a23aff1e468613a1f
MD5 b80b0c8b64e9340879843d09676fa43f
SHA1 39da885d33365a43fa5cd8e24c70dd316ec352f8
SHA512 e021a6be1866b66065396577acf47fa28321b1fbf2da831087466f39ed798f23c03b62b3b955e5748ae81dce73f44ab5977e0329b75256084e65039a82fb0255
SSDEEP 24576:SAiNVlm4qdMhZAeG0KZjA7Mn9GHZrSJw41TRPZRfDCCHehC4WoK8:PoVlB6f0m3cMw41jRfDCm4Wo
TLSH
T1CE45337CDD8AA81CD838E97ADBFC3F8DE78684D25DB4409A57419357300FA811E1AB47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12970

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

SetRect GetMessageA DefWindowProcA BeginPaint GetWindowWord EndPaint SetWindowWord LoadIconA RegisterClassA OemToCharA SetWindowTextA OemToCharBuffA LoadCursorA UpdateWindow SendMessageA GetTopWindow GetLastActivePopup EnableWindow PostMessageA GetClientRect ShowWindow GetDC SetTimer GetSysColor ReleaseDC SetCursor KillTimer PostQuitMessage DialogBoxIndirectParamA GetWindowRect GetSystemMetrics SetWindowPos GetDlgItemTextA EndDialog PeekMessageA TranslateMessage DispatchMessageA GetParent SetDlgItemTextA SendDlgItemMessageA GetDlgItem InvalidateRect wsprintfA MessageBoxA

kernel32

DosDateTimeToFileTime GlobalLock RtlUnwind _lcreat GetModuleHandleA FindNextFileA GetCommandLineA SetFileAttributesA DeleteFileA RemoveDirectoryA GetVersion GetModuleFileNameA SetErrorMode GetTempPathA GetTempFileNameA CreateProcessA WaitForSingleObject GetTickCount GetWindowsDirectoryA OpenFile LocalAlloc GetCurrentDirectoryA GlobalUnlock GlobalHandle LocalFree LocalFileTimeToFileTime GlobalAlloc FindClose FindFirstFileA SetCurrentDirectoryA lstrlenA CreateDirectoryA SetFileTime _llseek GlobalFree lstrcpyA _lopen _lwrite _lread lstrcatA _lclose

gdi32

SetTextColor GetTextExtentPoint32A GetBkColor SetBkColor ExtTextOutA GetTextMetricsA GetTextAlign DeleteObject TextOutA SetTextAlign SetBkMode CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject

Name

.text

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

_winzip_

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

3a0d6ac769c2ed119918b4844425edc049285912e4a2e28a23aff1e468613a1f

user32

kernel32

gdi32

generic