f105742c37c72059d23edb82afb799e2f0f90bb4f7b5ee44531b9be7d70e8c82

Sharing

Copy URL Twitter E-mail

General

Target
f105742c37c72059d23edb82afb799e2f0f90bb4f7b5ee44531b9be7d70e8c82
Size 1.4MB
Sample260722-sfa3watvgx
SHA256 f105742c37c72059d23edb82afb799e2f0f90bb4f7b5ee44531b9be7d70e8c82
MD5 dcdd36bca9a3fba17a7a5fd849941a0e
SHA1 8d238f2e4321e8632f6828f13ea076a1b3008cf6
SHA512 e1e624f682c6056eac01d4ac767bbdfa2d80afd86af8407c66b959f0396c9ac716d751961f64e4fdc48c51f9c08a0597b4a4249b7b8d67402a6b9326e5a0361e
SSDEEP 24576:CzXsaa3HGMarnqNv8+KOTDZ4uNpIo6DDWLTtb/Az29SgqpfBc4/wDQfOPIZ:qa3mMWqNv8mJ4uNpIoiyLTtb/Egqp5cm
TLSH
T1C26533A8DA51A072C844133D9A3C9DF09D746439B209DDD8DEC856BC4875B9BF23F6C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f105742c37c72059d23edb82afb799e2f0f90bb4f7b5ee44531b9be7d70e8c82

File Explorer

f105742c37c72059d23edb82afb799e2f0f90bb4f7b5ee44531b9be7d70e8c82

.exe 1.4MB

f105742c37c72059d23edb82afb799e2f0f90bb4f7b5ee44531b9be7d70e8c82

IMPHASH 78c751010579c51cdad3f096a3cbcc97
SHA256 f105742c37c72059d23edb82afb799e2f0f90bb4f7b5ee44531b9be7d70e8c82
MD5 dcdd36bca9a3fba17a7a5fd849941a0e
SHA1 8d238f2e4321e8632f6828f13ea076a1b3008cf6
SHA512 e1e624f682c6056eac01d4ac767bbdfa2d80afd86af8407c66b959f0396c9ac716d751961f64e4fdc48c51f9c08a0597b4a4249b7b8d67402a6b9326e5a0361e
SSDEEP 24576:CzXsaa3HGMarnqNv8+KOTDZ4uNpIo6DDWLTtb/Az29SgqpfBc4/wDQfOPIZ:qa3mMWqNv8mJ4uNpIoiyLTtb/Egqp5cm
TLSH
T1C26533A8DA51A072C844133D9A3C9DF09D746439B209DDD8DEC856BC4875B9BF23F6C8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteA FindExecutableA

user32

CharNextA DefWindowProcA GetWindowWord SetWindowWord BeginPaint GetSysColor GetClientRect SetRect EndPaint RegisterClassA OemToCharBuffA LoadCursorA GetLastActivePopup ShowWindow PostMessageA EnableWindow DestroyWindow SetWindowTextA SetForegroundWindow SetActiveWindow GetWindowRect SetTimer KillTimer DialogBoxIndirectParamA GetDlgItemTextA EndDialog SendMessageA GetKeyState PeekMessageA TranslateMessage DispatchMessageA GetParent SetDlgItemTextA SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow wsprintfA MessageBoxA SetCursor GetSystemMetrics SetWindowPos

kernel32

CreateDirectoryA _lclose _lopen GlobalUnlock RtlUnwind GetCommandLineA GetModuleHandleA ExitProcess GetACP GetModuleFileNameA SetErrorMode GetVersion LoadLibraryA GetProcAddress FreeLibrary lstrcmpiA GetWindowsDirectoryA GetEnvironmentVariableA LocalAlloc LocalFree GlobalHandle lstrcpyA GlobalFree GlobalAlloc GlobalLock WinExec _llseek GetDriveTypeA _lread _lwrite GetVolumeInformationA FindClose FindFirstFileA GetCurrentDirectoryA SetCurrentDirectoryA lstrlenA lstrcatA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime _lcreat

gdi32

GetBkColor SetBkColor SetTextColor SetTextAlign DeleteObject GetTextExtentPoint32A ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject

advapi32

RegQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

f105742c37c72059d23edb82afb799e2f0f90bb4f7b5ee44531b9be7d70e8c82

shell32

user32

kernel32

gdi32

advapi32

generic