9b7fed4895f170d7f8ab7609380ebf0088d3d28d9b766c133e21234815d82f1e

Sharing

Copy URL Twitter E-mail

General

Target
9b7fed4895f170d7f8ab7609380ebf0088d3d28d9b766c133e21234815d82f1e
Size 343KB
Sample260729-tsglvsxeja
SHA256 9b7fed4895f170d7f8ab7609380ebf0088d3d28d9b766c133e21234815d82f1e
MD5 73f43affc3fbf72d92d247e5708b30fd
SHA1 339cf7894cbd5ba16bedfb00f947ebf605f4cce8
SHA512 c10b98f22225cc3a1931ec90fc01e13d40fda7d09ce26f2053b54b1ff0e3ec2ff096f9ed7fca613a2d7bc0ceef6ec75b1a73c5b98fb97124a3df2358d3627cd3
SSDEEP 6144:75+fk+tD3mQGJd9RfBoalj+FLkUXPCj+hRnvOP/2IB:IkeD2QGJdzfOIjS4UfW+DnA2I
TLSH
T135746C11B9C49036D2B338310779E2B249BDBD311E255A8F13D81E7A5F74492BA39B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b7fed4895f170d7f8ab7609380ebf0088d3d28d9b766c133e21234815d82f1e

File Explorer

9b7fed4895f170d7f8ab7609380ebf0088d3d28d9b766c133e21234815d82f1e

.exe 343KB

9b7fed4895f170d7f8ab7609380ebf0088d3d28d9b766c133e21234815d82f1e

IMPHASH 0b84a654db8ad9f6629cd9596b5aa1ad
SHA256 9b7fed4895f170d7f8ab7609380ebf0088d3d28d9b766c133e21234815d82f1e
MD5 73f43affc3fbf72d92d247e5708b30fd
SHA1 339cf7894cbd5ba16bedfb00f947ebf605f4cce8
SHA512 c10b98f22225cc3a1931ec90fc01e13d40fda7d09ce26f2053b54b1ff0e3ec2ff096f9ed7fca613a2d7bc0ceef6ec75b1a73c5b98fb97124a3df2358d3627cd3
SSDEEP 6144:75+fk+tD3mQGJd9RfBoalj+FLkUXPCj+hRnvOP/2IB:IkeD2QGJdzfOIjS4UfW+DnA2I
TLSH
T135746C11B9C49036D2B338310779E2B249BDBD311E255A8F13D81E7A5F74492BA39B2F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27157

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\7HS\Desktop\BO2012Launcher\build_c_x86\BO2012Launcher.pdb

shell32

ShellExecuteExW Shell_NotifyIconW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW

kernel32

FindClose GetFileAttributesW GetPrivateProfileStringW DeleteFileW GetLocalTime GetCurrentDirectoryW CopyFileW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW DecodePointer EncodePointer WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize SetConsoleCtrlHandler GetProcessHeap LCMapStringW GetPrivateProfileIntW GetTimeFormatW GetDateFormatW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExW FindFirstFileExA OutputDebugStringW OutputDebugStringA GetCurrentThread HeapAlloc HeapFree GetACP GetModuleHandleExW ExitProcess WideCharToMultiByte MultiByteToWideChar GetModuleFileNameA GetModuleFileNameW TlsFree WriteFile GetStdHandle FindNextFileW WritePrivateProfileStringW FindFirstFileW CloseHandle CreateFileW FreeLibrary GetProcAddress CompareStringW RaiseException InterlockedPushEntrySList InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue LoadLibraryExW

user32

GetMessageW DefWindowProcW CallWindowProcW PostMessageW GetWindowRect DestroyWindow GetDC MessageBoxW FillRect CreateWindowExW SendMessageW GetSystemMetrics SetWindowTextW CreatePopupMenu RegisterClassExW TrackPopupMenu ShowWindow DispatchMessageW DestroyIcon GetDlgCtrlID ClientToScreen MapWindowPoints GetWindowLongW AdjustWindowRect DestroyMenu TranslateMessage LoadIconW LoadCursorW GetClassNameW SetCursor wsprintfW SetWindowLongW GetClientRect AppendMenuW DrawTextW PostQuitMessage PtInRect UpdateWindow SetForegroundWindow InvalidateRect ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow GetWindowTextW TrackMouseEvent GetWindowTextLengthW

gdi32

CreateFontW EnumFontFamiliesExW SetTextColor SetBkMode SetBkColor DeleteObject CreateSolidBrush SelectObject

Sharing

General

Malware Config

Signatures

File Explorer

9b7fed4895f170d7f8ab7609380ebf0088d3d28d9b766c133e21234815d82f1e

shell32

comctl32

shlwapi

kernel32

user32

gdi32

generic