546a9114e61271c467ca19d0326459e58975c3f22f1218252d25e23cb13cb627

Sharing

Copy URL Twitter E-mail

General

Target
546a9114e61271c467ca19d0326459e58975c3f22f1218252d25e23cb13cb627
Size 975KB
Sample260729-ed1nvstdqd
SHA256 546a9114e61271c467ca19d0326459e58975c3f22f1218252d25e23cb13cb627
MD5 a29e5700f3b1149037ae85c07c62d877
SHA1 4abf31aed4318f7fe660c9e37edfac22adea93c5
SHA512 eb2c8e8a7d1fb53386ea6efbad8eff1243a34991fa2ff6a5a14ca8d94690fc3f917e79402604d58cc1bb3b0556b56cbd389d982e083093d7c62502a109e32e0b
SSDEEP 12288:6Lvxg4BdQCVTTWzyJeHR2B1BEEUOSs3LunR:6LvxnTT2Cey1BEEUOSsSnR
TLSH
T1EB253AA0F16694E3DA1784B90807F67B1638B76041158EA7E788CD0EAE73BD36DC6707
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
546a9114e61271c467ca19d0326459e58975c3f22f1218252d25e23cb13cb627

File Explorer

546a9114e61271c467ca19d0326459e58975c3f22f1218252d25e23cb13cb627

.exe 975KB

546a9114e61271c467ca19d0326459e58975c3f22f1218252d25e23cb13cb627

IMPHASH 5ec858c7e3794b3c9f542259e49abe49
SHA256 546a9114e61271c467ca19d0326459e58975c3f22f1218252d25e23cb13cb627
MD5 a29e5700f3b1149037ae85c07c62d877
SHA1 4abf31aed4318f7fe660c9e37edfac22adea93c5
SHA512 eb2c8e8a7d1fb53386ea6efbad8eff1243a34991fa2ff6a5a14ca8d94690fc3f917e79402604d58cc1bb3b0556b56cbd389d982e083093d7c62502a109e32e0b
SSDEEP 12288:6Lvxg4BdQCVTTWzyJeHR2B1BEEUOSs3LunR:6LvxnTT2Cey1BEEUOSsSnR
TLSH
T1EB253AA0F16694E3DA1784B90807F67B1638B76041158EA7E788CD0EAE73BD36DC6707
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

75616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegGetValueW RegOpenKeyW RegQueryValueExW RegSetValueExA RegSetValueExW

gdi32

CreateCompatibleDC CreateDIBSection CreateFontIndirectW DeleteDC DeleteObject GetDeviceCaps GetTextExtentPointA GetTextExtentPointW GetTextMetricsW SelectObject SetBkMode SetTextColor

kernel32

CloseHandle CompareStringW CreateEventW CreateFileW CreateMutexW CreateProcessW CreateThread DelayLoadFailureHook DuplicateHandle EnterCriticalSection ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetFullPathNameW GetModuleHandleW GetOverlappedResult GetProcAddress GetStartupInfoW GetTickCount HeapAlloc HeapReAlloc InitializeCriticalSectionEx IsBadStringPtrA IsBadStringPtrW LeaveCriticalSection LoadLibraryW MapViewOfFile MulDiv MultiByteToWideChar OpenProcess ReadDirectoryChangesW ResolveDelayLoadedAPI SetThreadDescription UnmapViewOfFile WaitForMultipleObjects WaitForSingleObject lstrcmpiW

ntdll

NtSetInformationProcess _vsnprintf

rpcrt4

UuidCreate

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf __stdio_common_vswprintf _assert _configure_wide_argv _get_initial_wide_environment _initialize_wide_environment _set_app_type _strdup _wcsicmp _wcsnicmp calloc exit free fwrite getenv iswspace malloc memcmp memcpy memmove memset realloc strchr strcmp strcspn strlen wcschr wcscmp wcscpy wcslen wcstoul

user32

AdjustWindowRect AppendMenuW BeginPaint ChangeDisplaySettingsExW ClientToScreen ClipCursor CopyIcon CreateDesktopW CreateIcon CreatePopupMenu CreateWindowExW DefWindowProcW DestroyIcon DestroyMenu DestroyWindow DispatchMessageW DrawCaptionTempW DrawFrameControl DrawIconEx DrawTextW EndPaint EnumDisplayDevicesW EnumDisplaySettingsExW ExitWindowsEx GetAncestor GetClientRect GetDC GetDesktopWindow GetForegroundWindow GetMenuInfo GetMenuItemCount GetMenuItemInfoW GetMessageW GetProcessWindowStation GetSystemMetrics GetThreadDesktop GetUserObjectInformationW GetWindow GetWindowLongW GetWindowRect GetWindowThreadProcessId InsertMenuItemW IntersectRect InvalidateRect IsIconic IsWindowEnabled IsWindowVisible KillTimer LoadCursorA LoadCursorW LoadIconW LoadStringW MessageBoxW MsgWaitForMultipleObjects PaintDesktop PeekMessageW PostMessageW PostQuitMessage RegisterClassExW RegisterClassW ReleaseDC SendMessageW SendNotifyMessageW SetCursor SetForegroundWindow SetMenuInfo SetMenuItemInfoW SetParent SetShellWindow SetThreadDesktop SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SubtractRect SystemParametersInfoW TrackPopupMenuEx TranslateMessage UnregisterClassW UpdateLayeredWindow UpdateWindow

win32u

NtUserMessageCall

Name

.text

Size

72KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

692B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

28KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

546a9114e61271c467ca19d0326459e58975c3f22f1218252d25e23cb13cb627

advapi32

gdi32

kernel32

ntdll

rpcrt4

ucrtbase

user32

win32u

generic