c330878abf05ebe1ec5e845b4e71418848d0603bf2a8e4be5c640c0312d44d5b

Sharing

Copy URL Twitter E-mail

General

Target
c330878abf05ebe1ec5e845b4e71418848d0603bf2a8e4be5c640c0312d44d5b
Size 6.1MB
Sample260729-ftz8pseb87
SHA256 c330878abf05ebe1ec5e845b4e71418848d0603bf2a8e4be5c640c0312d44d5b
MD5 ff7fe10f230b5a135cc877e5c2e8ad31
SHA1 4d1a694ee5fc981ac1dd08fcfd86a2d903277901
SHA512 4827b6cbd5419be5aae5180ae5aa849eaca1e3080e556718f28147953d6d15f75504350462c83ab22b1e753e3068cac6d7a285518ed45929afa18c466dd0ab85
SSDEEP 196608:LYhVGCOAhg4uVgyTG9VnizlpHnswkb+iZ+F6vPS/:4mAOTKyKVCHnLkrZ+Qs
TLSH
T1495633E03576C888DAF2AC34FDAC2F19AA3DF518065C917AC71D4A69D9E1D2F0B82135
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c330878abf05ebe1ec5e845b4e71418848d0603bf2a8e4be5c640c0312d44d5b

File Explorer

c330878abf05ebe1ec5e845b4e71418848d0603bf2a8e4be5c640c0312d44d5b

.exe 6.1MB

c330878abf05ebe1ec5e845b4e71418848d0603bf2a8e4be5c640c0312d44d5b

IMPHASH e2a312eb12f1d00dac5e9132926c53bf
SHA256 c330878abf05ebe1ec5e845b4e71418848d0603bf2a8e4be5c640c0312d44d5b
MD5 ff7fe10f230b5a135cc877e5c2e8ad31
SHA1 4d1a694ee5fc981ac1dd08fcfd86a2d903277901
SHA512 4827b6cbd5419be5aae5180ae5aa849eaca1e3080e556718f28147953d6d15f75504350462c83ab22b1e753e3068cac6d7a285518ed45929afa18c466dd0ab85
SSDEEP 196608:LYhVGCOAhg4uVgyTG9VnizlpHnswkb+iZ+F6vPS/:4mAOTKyKVCHnLkrZ+Qs
TLSH
T1495633E03576C888DAF2AC34FDAC2F19AA3DF518065C917AC71D4A69D9E1D2F0B82135
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15291

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

PeekMessageW DispatchMessageW wsprintfA wvsprintfW SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled GetAsyncKeyState EmptyClipboard SetClipboardData CloseClipboard OpenClipboard IsDlgButtonChecked CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos SetDlgItemTextW GetClassInfoW RegisterClassW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW MessageBoxIndirectW CharPrevW CharNextA CreateWindowExW GetDlgItemTextW LoadCursorW

gdi32

GetDeviceCaps SetBkColor CreateBrushIndirect SetTextColor SetBkMode SelectObject DeleteObject CreateFontIndirectW

kernel32

WriteFile WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode CreateProcessW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep GetLastError CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW GetModuleHandleA MoveFileExW GetProcAddress lstrcmpiA lstrcpyA lstrcatW GetTempPathW

Sharing

General

Malware Config

Signatures

File Explorer

c330878abf05ebe1ec5e845b4e71418848d0603bf2a8e4be5c640c0312d44d5b

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic