598acc19bcc9865b5d1e6bbd47a085fdb782b956df7872c9d1c510ac67bc27e7

Sharing

Copy URL Twitter E-mail

General

Target
598acc19bcc9865b5d1e6bbd47a085fdb782b956df7872c9d1c510ac67bc27e7
Size 908KB
Sample260729-emn2eswtbv
SHA256 598acc19bcc9865b5d1e6bbd47a085fdb782b956df7872c9d1c510ac67bc27e7
MD5 c32109a760eecfd50a8b76876ca08521
SHA1 6cffa853531f190e9a6c047f71b60ec123a17f27
SHA512 940e4b19be2211c4c891a41d02545cf5066652e77b868b2648e225643bdbc81f17e2b884cce088b1048590de0f1609396d1f181ba390d865c9dcf571a8ce3778
SSDEEP 6144:X/xhvR/eBFCi/mJzTSzYuypnCTuypnCAy:XZhvWCwmZWzYuywTuywAy
TLSH
T12815E951E3D9E0A5F4628B345D7A83393B39FA508B358F07DF04EA4D1AB2B40EE61716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
598acc19bcc9865b5d1e6bbd47a085fdb782b956df7872c9d1c510ac67bc27e7

File Explorer

598acc19bcc9865b5d1e6bbd47a085fdb782b956df7872c9d1c510ac67bc27e7

.exe 908KB

598acc19bcc9865b5d1e6bbd47a085fdb782b956df7872c9d1c510ac67bc27e7

IMPHASH 45825f0acffd320b4ceae45e462cc586
SHA256 598acc19bcc9865b5d1e6bbd47a085fdb782b956df7872c9d1c510ac67bc27e7
MD5 c32109a760eecfd50a8b76876ca08521
SHA1 6cffa853531f190e9a6c047f71b60ec123a17f27
SHA512 940e4b19be2211c4c891a41d02545cf5066652e77b868b2648e225643bdbc81f17e2b884cce088b1048590de0f1609396d1f181ba390d865c9dcf571a8ce3778
SSDEEP 6144:X/xhvR/eBFCi/mJzTSzYuypnCTuypnCAy:XZhvWCwmZWzYuywTuywAy
TLSH
T12815E951E3D9E0A5F4628B345D7A83393B39FA508B358F07DF04EA4D1AB2B40EE61716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

GetOpenFileNameA

gdi32

DeleteObject GetObjectW GetStockObject

kernel32

GetCommandLineA GetCurrentDirectoryA GetModuleHandleA GetPrivateProfileIntA GetPrivateProfileStringA GetStartupInfoA LocalAlloc LocalFree LocalLock LocalReAlloc OpenFile WinExec WritePrivateProfileStringA _lclose _lcreat _llseek _lopen _lread _lwrite lstrcmpA lstrcmpiA

shell32

ExtractIconA ShellAboutA

ucrtbase

__p___argc __p___argv __stdio_common_vsprintf __stdio_common_vsscanf _configure_narrow_argv _get_initial_narrow_environment _initialize_narrow_environment _set_app_type exit memcpy memset strcmp strcpy strlen

user32

ArrangeIconicWindows BeginPaint CheckDlgButton CheckMenuItem CheckRadioButton CloseWindow CreateIcon CreateWindowExW DefFrameProcW DefMDIChildProcW DefWindowProcW DestroyMenu DestroyWindow DialogBoxParamW DispatchMessageW DrawIcon EnableMenuItem EndDialog EndPaint GetClientRect GetDlgItemTextA GetIconInfo GetMessageW GetSubMenu GetWindowLongW IsDlgButtonChecked IsIconic IsZoomed LoadAcceleratorsW LoadCursorW LoadIconW LoadMenuW LoadStringA MessageBoxA OpenIcon PostQuitMessage RegisterClassW SendDlgItemMessageA SendDlgItemMessageW SendMessageA SendMessageW SetDlgItemTextA SetMenu SetWindowLongW SetWindowPos SetWindowTextA ShowWindow TranslateAcceleratorW TranslateMessage UpdateWindow WinHelpA wsprintfA

Name

.text

Size

24KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

220KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

4KB

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

4KB

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

4KB

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

4KB

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

4KB

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

4KB

Virtual Size

138B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

598acc19bcc9865b5d1e6bbd47a085fdb782b956df7872c9d1c510ac67bc27e7

comdlg32

gdi32

kernel32

shell32

ucrtbase

user32

generic