034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044

Sharing

Copy URL Twitter E-mail

General

Target
034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044
Size 276KB
Sample260728-y87kfahj21
SHA256 034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044
MD5 13641a3d39a92ab2d33746c2e5e49e6b
SHA1 cf87af9b11b836de6e154cdabae9ae2868fd73c1
SHA512 e9d4e079424637485a88b6f2d7023dd8e540e0cf4c61d11edc46ced30f90f401cf193c04bf33664a4495cbae288a54b17cc7b1425b42bd55af50f822c2706432
SSDEEP 6144:apMURP24EPlxwH/MHcBx3rAOugoL5cYbu:EMURPalxwHKY3rY9cYbu
TLSH
T12F548C2175E1C476D5730A3608F9A7B5567DBC304E3A9A3F63D41B2E9E30493AA30B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044

File Explorer

034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044

.exe 276KB

034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044

IMPHASH c62738c1c1a80c81814f21823188ca59
SHA256 034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044
MD5 13641a3d39a92ab2d33746c2e5e49e6b
SHA1 cf87af9b11b836de6e154cdabae9ae2868fd73c1
SHA512 e9d4e079424637485a88b6f2d7023dd8e540e0cf4c61d11edc46ced30f90f401cf193c04bf33664a4495cbae288a54b17cc7b1425b42bd55af50f822c2706432
SSDEEP 6144:apMURP24EPlxwH/MHcBx3rAOugoL5cYbu:EMURPalxwHKY3rY9cYbu
TLSH
T12F548C2175E1C476D5730A3608F9A7B5567DBC304E3A9A3F63D41B2E9E30493AA30B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71731

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

OleUninitialize OleInitialize

shell32

ShellExecuteExW Shell_NotifyIconW

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW PathFileExistsW

kernel32

GetFileAttributesW GetComputerNameExW CopyFileW GetComputerNameW MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetLocalTime GetTickCount GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW DeleteFileW CloseHandle RemoveDirectoryW SetFileAttributesW GetLastError CreateProcessW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent FindNextFileW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID IsValidLocale SetFilePointerEx GetFileType GetACP WriteFile GetStdHandle GetModuleHandleExW ExitProcess HeapReAlloc HeapFree HeapAlloc LoadLibraryExW FreeLibrary RtlUnwind RaiseException FindFirstFileW FindClose GetModuleFileNameW GetDiskFreeSpaceExW GetCurrentDirectoryW SetCurrentDirectoryW SetStdHandle HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleW WaitForSingleObjectEx CreateFileW

user32

GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow UpdateWindow SetWindowLongW TrackPopupMenu AppendMenuW DestroyMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW GetClassNameW LoadIconW LoadCursorW DestroyIcon DrawTextW CreatePopupMenu

gdi32

SetBkColor SetTextColor SelectObject CreateFontW CreateSolidBrush DeleteObject SetBkMode GetStockObject EnumFontFamiliesExW

advapi32

RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegSetValueExW

Name

.text

Size

166KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

412B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044

ole32

shell32

comctl32

shlwapi

kernel32

user32

gdi32

advapi32

generic