9a7ee2f066c610b77e4528bd92d886d138204ae7b2c5069048074e0018f95018

Sharing

Copy URL Twitter E-mail

General

Target
9a7ee2f066c610b77e4528bd92d886d138204ae7b2c5069048074e0018f95018
Size 712KB
Sample260729-baargs1bqe
SHA256 9a7ee2f066c610b77e4528bd92d886d138204ae7b2c5069048074e0018f95018
MD5 638de5e2243583f2e691c85ab7e15a65
SHA1 1da78adf16b02d429b4a908e7f1abb6798c31272
SHA512 367ed23931a6a53fd2b6fadcb4799789a6806149e618bcf843ad974b4806942ac9ebdcbb806455e39fa1d61dcc733a853adbaa65876f77e133c1519619cf6cd6
SSDEEP 6144:C/UjU2uclZ6rQ8F0fhiZ0bpEYqzW/Kb3egnDRebs5AobAtZvPET:MUjvuclw8wozbbaW/Kb3egndev0
TLSH
T1A5F40A2467FA8904F5F7AF3CA8B947951B7ABD626F34C24E4A00664D08B5E90DD34B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a7ee2f066c610b77e4528bd92d886d138204ae7b2c5069048074e0018f95018

File Explorer

9a7ee2f066c610b77e4528bd92d886d138204ae7b2c5069048074e0018f95018

.exe 712KB

9a7ee2f066c610b77e4528bd92d886d138204ae7b2c5069048074e0018f95018

IMPHASH 5286c50bc4d327bb32934bd488301802
SHA256 9a7ee2f066c610b77e4528bd92d886d138204ae7b2c5069048074e0018f95018
MD5 638de5e2243583f2e691c85ab7e15a65
SHA1 1da78adf16b02d429b4a908e7f1abb6798c31272
SHA512 367ed23931a6a53fd2b6fadcb4799789a6806149e618bcf843ad974b4806942ac9ebdcbb806455e39fa1d61dcc733a853adbaa65876f77e133c1519619cf6cd6
SSDEEP 6144:C/UjU2uclZ6rQ8F0fhiZ0bpEYqzW/Kb3egnDRebs5AobAtZvPET:MUjvuclw8wozbbaW/Kb3egndev0
TLSH
T1A5F40A2467FA8904F5F7AF3CA8B947951B7ABD626F34C24E4A00664D08B5E90DD34B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

ShellAboutW Shell_NotifyIconW

shlwapi

StrFormatByteSizeW StrFormatKBSizeW

comctl32

CreateStatusWindowW ImageList_Create ImageList_Remove ImageList_ReplaceIcon InitCommonControls

user32

AppendMenuW BeginPaint BringWindowToTop CallWindowProcW CascadeWindows CheckMenuItem CheckMenuRadioItem CopyRect CreateDialogParamW CreateIconIndirect CreatePopupMenu DefWindowProcW DeleteMenu DestroyIcon DestroyMenu DialogBoxParamW DrawMenuBar DrawTextW EnableMenuItem EnableWindow EndDialog EndPaint EnumWindows FillRect GetClassLongPtrW GetClientRect GetCursorPos GetDC GetDlgItem GetGuiResources GetMenu GetMenuItemCount GetMenuState GetParent GetSubMenu GetSysColor GetSystemMetrics GetWindow GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextW GetWindowThreadProcessId InsertMenuW InvalidateRect IsHungAppWindow IsIconic IsWindow IsWindowVisible KillTimer LoadBitmapW LoadIconW LoadImageA LoadImageW LoadMenuW LoadStringA LoadStringW MapWindowPoints MessageBoxA MessageBoxW OpenIcon PostMessageW ReleaseDC RemoveMenu SendMessageA SendMessageTimeoutW SendMessageW SetFocus SetForegroundWindow SetMenuDefaultItem SetTimer SetWindowLongPtrW SetWindowLongW SetWindowPlacement SetWindowPos SetWindowTextW ShowWindow SwitchToThisWindow TileWindows TrackPopupMenu TrackPopupMenuEx WinHelpW wsprintfW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreatePen CreateSolidBrush DeleteDC DeleteObject ExcludeClipRect ExtTextOutW LineTo MoveToEx RestoreDC SaveDC SelectObject SetBkColor SetPixel SetTextColor

advapi32

AdjustTokenPrivileges GetUserNameW ImpersonateLoggedOnUser LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW RevertToSelf

ucrtbase

__p___argc __p___argv __stdio_common_vswprintf _configure_narrow_argv _crt_atexit _get_initial_narrow_environment _initialize_narrow_environment _initterm _initterm_e _set_app_type _ui64tow _wcsupr exit log10 memcpy memset strcmp wcscat wcslen wcsstr

kernel32

CloseHandle CreateEventW CreateProcessW CreateThread EnterCriticalSection FormatMessageW GetCommandLineA GetModuleHandleA GetModuleHandleW GetPriorityClass GetProcAddress GetProcessAffinityMask GetProcessIoCounters GetStartupInfoA GetSystemInfo GetVersionExW HeapAlloc HeapFree InitializeCriticalSection IsWow64Process LeaveCriticalSection LocalFree MultiByteToWideChar OpenProcess ReadProcessMemory ResetEvent SetEvent SetPriorityClass SetProcessAffinityMask TerminateProcess WaitForSingleObject WriteProcessMemory __chkstk lstrcmpW

ntdll

NtQueryInformationProcess NtQuerySystemInformation

Sharing

General

Malware Config

Signatures

File Explorer

9a7ee2f066c610b77e4528bd92d886d138204ae7b2c5069048074e0018f95018

shell32

shlwapi

comctl32

user32

gdi32

advapi32

ucrtbase

kernel32

ntdll

generic