a010556f62553fb7bc48373bc060fe1ca3cdf6c5d0daa8a2023775e27828e934

Sharing

Copy URL Twitter E-mail

General

Target
a010556f62553fb7bc48373bc060fe1ca3cdf6c5d0daa8a2023775e27828e934
Size 715KB
Sample260729-tmbtesbb82
SHA256 a010556f62553fb7bc48373bc060fe1ca3cdf6c5d0daa8a2023775e27828e934
MD5 1e3d375315ec00253d6ef0e7b7c7fc6e
SHA1 1be07e0dbcfb022b3fc3f4bdc5282680d246ff1b
SHA512 0c9d1587e8d054f95ecfa3cc6d3535410af7931b4674e2f45637d481c8bc14bce152961caf307bbaf8db27618591215334348e287bcbb1f729b9c98d51c2718e
SSDEEP 12288:TgrmAEuDjOSJoljoXIu892RwzAgTsvTQ3mZ68VOGWWvORimZFwr8bgf842V1CBgn:TEEqjOSqljoXIu892RwzA2sOG/vI/ZF1
TLSH
T15CF48E1079C1C036E9B310724AFEA66A456DF8320F2459DB93D80B7E5F785E27E3261B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a010556f62553fb7bc48373bc060fe1ca3cdf6c5d0daa8a2023775e27828e934

File Explorer

a010556f62553fb7bc48373bc060fe1ca3cdf6c5d0daa8a2023775e27828e934

.exe 715KB

a010556f62553fb7bc48373bc060fe1ca3cdf6c5d0daa8a2023775e27828e934

IMPHASH e986ee0d334d6c9490b5dfb9ec7db98d
SHA256 a010556f62553fb7bc48373bc060fe1ca3cdf6c5d0daa8a2023775e27828e934
MD5 1e3d375315ec00253d6ef0e7b7c7fc6e
SHA1 1be07e0dbcfb022b3fc3f4bdc5282680d246ff1b
SHA512 0c9d1587e8d054f95ecfa3cc6d3535410af7931b4674e2f45637d481c8bc14bce152961caf307bbaf8db27618591215334348e287bcbb1f729b9c98d51c2718e
SSDEEP 12288:TgrmAEuDjOSJoljoXIu892RwzAgTsvTQ3mZ68VOGWWvORimZFwr8bgf842V1CBgn:TEEqjOSqljoXIu892RwzA2sOG/vI/ZF1
TLSH
T15CF48E1079C1C036E9B310724AFEA66A456DF8320F2459DB93D80B7E5F785E27E3261B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

263200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\7HS\Desktop\BO2012Launcher\build_min_x86\BO2012Launcher.pdb

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

iphlpapi

GetAdaptersInfo

shlwapi

PathFileExistsW

kernel32

CopyFileW WideCharToMultiByte WritePrivateProfileStringW GetPrivateProfileIntW GetFileAttributesW GetPrivateProfileStringW GetLastError GetLocalTime DeleteFileW RemoveDirectoryW GetProcessId WaitForSingleObject CloseHandle GetExitCodeProcess FormatMessageW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess FindClose IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentDirectoryW InitializeSListHead SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle OutputDebugStringW OutputDebugStringA SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExW FindFirstFileExA GetTimeZoneInformation SetConsoleCtrlHandler GetProcessHeap FindNextFileW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetFileType GetCurrentThread GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetModuleHandleExW ExitProcess HeapFree HeapReAlloc HeapAlloc InterlockedFlushSList InterlockedPushEntrySList LoadLibraryExW FreeLibrary RaiseException RtlUnwind FindFirstFileW FlushFileBuffers WriteConsoleW GetCurrentThreadId MultiByteToWideChar IsProcessorFeaturePresent CreateFileW

user32

LoadIconW GetWindowThreadProcessId RealGetWindowClassW EnumWindows GetWindowLongW GetWindowTextLengthW DefWindowProcW CallWindowProcW PostMessageW GetWindowRect DestroyWindow GetDC FillRect CreateWindowExW SendMessageW GetSystemMetrics SetWindowTextW CreatePopupMenu RegisterClassExW TrackPopupMenu ShowWindow GetDlgCtrlID ClientToScreen SetMenuItemInfoW TrackMouseEvent AdjustWindowRect DestroyMenu GetClassNameW SetCursor SetWindowLongW GetClientRect AppendMenuW DrawTextW PostQuitMessage PtInRect UpdateWindow SetForegroundWindow InvalidateRect ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow GetWindowTextW GetMessageW MessageBoxW DispatchMessageW TranslateMessage MapWindowPoints LoadCursorW

gdi32

DeleteObject SetBkColor SetBkMode GetStockObject CreateFontW EnumFontFamiliesExW SelectObject CreateSolidBrush SetTextColor

Name

.text

Size

556KB

Virtual Size

555KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a010556f62553fb7bc48373bc060fe1ca3cdf6c5d0daa8a2023775e27828e934

shell32

comctl32

iphlpapi

shlwapi

kernel32

user32

gdi32

generic