2f1d44d03554769eb89adc0c427af5aa1397d98b0349712df3e725bf2ad2c4b2

Sharing

Copy URL Twitter E-mail

General

Target
2f1d44d03554769eb89adc0c427af5aa1397d98b0349712df3e725bf2ad2c4b2
Size 577KB
Sample260722-sdxtvsgb54
SHA256 2f1d44d03554769eb89adc0c427af5aa1397d98b0349712df3e725bf2ad2c4b2
MD5 ec28356434be9743e30d49b060715e82
SHA1 1a0a1ff35aeaf4cedf3a5c954ede5b73464f3473
SHA512 0e74ac090ccffe6ef6e650bedff22ede0afd38a5e2a7904d6c167d331d2bcc3e05d7e6529fedb306801e5a2d805c81340615ae4c0ee49080f3e6495fe2b16ee0
SSDEEP 12288:K7uLytg+9F98XIobjOrC9Z2rINzJE1PnAIK9wxd17BIDyWs:KKLyyScfOu2YzadnFnxvsy
TLSH
T1B5C4232553E89533D481A5F247339F7BDAFA5E53491CC88BAA04ADE81AB02767F0704F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f1d44d03554769eb89adc0c427af5aa1397d98b0349712df3e725bf2ad2c4b2

File Explorer

2f1d44d03554769eb89adc0c427af5aa1397d98b0349712df3e725bf2ad2c4b2

.exe 577KB

2f1d44d03554769eb89adc0c427af5aa1397d98b0349712df3e725bf2ad2c4b2

IMPHASH 21e326f170fd82d896f09f64d43c6fed
SHA256 2f1d44d03554769eb89adc0c427af5aa1397d98b0349712df3e725bf2ad2c4b2
MD5 ec28356434be9743e30d49b060715e82
SHA1 1a0a1ff35aeaf4cedf3a5c954ede5b73464f3473
SHA512 0e74ac090ccffe6ef6e650bedff22ede0afd38a5e2a7904d6c167d331d2bcc3e05d7e6529fedb306801e5a2d805c81340615ae4c0ee49080f3e6495fe2b16ee0
SSDEEP 12288:K7uLytg+9F98XIobjOrC9Z2rINzJE1PnAIK9wxd17BIDyWs:KKLyyScfOu2YzadnFnxvsy
TLSH
T1B5C4232553E89533D481A5F247339F7BDAFA5E53491CC88BAA04ADE81AB02767F0704F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14584

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteA FindExecutableA

user32

CharNextA DefWindowProcA GetWindowWord SetWindowWord BeginPaint GetSysColor GetClientRect SetRect EndPaint RegisterClassA OemToCharBuffA LoadCursorA GetLastActivePopup ShowWindow PostMessageA EnableWindow DestroyWindow SetWindowTextA SetForegroundWindow SetActiveWindow GetWindowRect SetTimer KillTimer DialogBoxIndirectParamA GetDlgItemTextA EndDialog SendMessageA GetKeyState PeekMessageA TranslateMessage DispatchMessageA GetParent SetDlgItemTextA SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow wsprintfA MessageBoxA SetCursor GetSystemMetrics SetWindowPos

kernel32

LocalFileTimeToFileTime _lread _lwrite LocalFree VirtualAlloc VirtualFree RtlUnwind HeapAlloc HeapFree GetCommandLineA GetModuleHandleA ExitProcess GetACP GetModuleFileNameA SetErrorMode GetVersion LoadLibraryA GetProcAddress FreeLibrary lstrcmpiA GetWindowsDirectoryA GetEnvironmentVariableA LocalAlloc _llseek GlobalHandle GlobalUnlock GlobalFree GlobalAlloc GlobalLock FindClose FindFirstFileA GetCurrentDirectoryA SetCurrentDirectoryA lstrlenA CreateDirectoryA lstrcatA SetFileTime _lclose DosDateTimeToFileTime _lcreat lstrcpyA _lopen GetVolumeInformationA WinExec GetDriveTypeA

gdi32

GetBkColor SetBkColor SetTextColor SetTextAlign DeleteObject GetTextExtentPoint32A ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject

advapi32

RegQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

2f1d44d03554769eb89adc0c427af5aa1397d98b0349712df3e725bf2ad2c4b2

shell32

user32

kernel32

gdi32

advapi32

generic