41391a14aff20dffe3d77cafbb1de35f19da24aa9803e0d097be531729380339

Sharing

Copy URL Twitter E-mail

General

Target
41391a14aff20dffe3d77cafbb1de35f19da24aa9803e0d097be531729380339
Size 716KB
Sample260729-vtnbgack21
SHA256 41391a14aff20dffe3d77cafbb1de35f19da24aa9803e0d097be531729380339
MD5 817dbd3c49b67939c5be202d05ccd8f3
SHA1 82a345fc134368de3e30d3f33baea0856bdb72cc
SHA512 93f6595d7341bdaf9994534207afc84e4cb192c0c56eef028baae3329831ec41abd494eb3e251e44832a15f4cca79fcd6d5a3bfba5f13cdc009ff5950dd3133d
SSDEEP 12288:SXvnkCs2O7XZOCSuEuyJx9TJZXmBECHM+tz9NcOpQCi6Z7pArYZ5w6qllw8X:SXvls2OjZOCSuEuyJx9HXmBEipnikpAv
TLSH
T103F47D1079C1C036E9B320724DFEA66A05ADF8320B2455DB93D81B7D5FB89E27E3161B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41391a14aff20dffe3d77cafbb1de35f19da24aa9803e0d097be531729380339

File Explorer

41391a14aff20dffe3d77cafbb1de35f19da24aa9803e0d097be531729380339

.exe 716KB

41391a14aff20dffe3d77cafbb1de35f19da24aa9803e0d097be531729380339

IMPHASH edbdeddda9be68f3f0581110fce4ef54
SHA256 41391a14aff20dffe3d77cafbb1de35f19da24aa9803e0d097be531729380339
MD5 817dbd3c49b67939c5be202d05ccd8f3
SHA1 82a345fc134368de3e30d3f33baea0856bdb72cc
SHA512 93f6595d7341bdaf9994534207afc84e4cb192c0c56eef028baae3329831ec41abd494eb3e251e44832a15f4cca79fcd6d5a3bfba5f13cdc009ff5950dd3133d
SSDEEP 12288:SXvnkCs2O7XZOCSuEuyJx9TJZXmBECHM+tz9NcOpQCi6Z7pArYZ5w6qllw8X:SXvls2OjZOCSuEuyJx9HXmBEipnikpAv
TLSH
T103F47D1079C1C036E9B320724DFEA66A05ADF8320B2455DB93D81B7D5FB89E27E3161B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

263552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\7HS\Desktop\BO2012Launcher\build_min_x86\BO2012Launcher.pdb

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

iphlpapi

GetAdaptersInfo

shlwapi

PathFileExistsW

kernel32

MultiByteToWideChar WideCharToMultiByte GetFileAttributesW GetLastError GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW DeleteFileW RemoveDirectoryW CloseHandle WaitForSingleObject GetExitCodeProcess GetProcessId GetStringTypeW FormatMessageW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter FindFirstFileW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId CopyFileW InitializeSListHead SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle OutputDebugStringW OutputDebugStringA SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExW FindFirstFileExA GetTimeZoneInformation SetConsoleCtrlHandler GetProcessHeap FindClose EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetFileType GetCurrentThread GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetModuleHandleExW ExitProcess HeapReAlloc HeapFree HeapAlloc InterlockedFlushSList InterlockedPushEntrySList LoadLibraryExW FreeLibrary RtlUnwind RaiseException GetCurrentDirectoryW FlushFileBuffers WriteConsoleW GetCurrentThreadId FindNextFileW GetStartupInfoW CreateFileW

user32

SetMenuItemInfoW RealGetWindowClassW GetWindowThreadProcessId EnumWindows LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint LoadIconW GetDC SetForegroundWindow UpdateWindow TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW ReleaseDC DrawTextW

gdi32

CreateSolidBrush DeleteObject EnumFontFamiliesExW SelectObject SetBkColor SetBkMode SetTextColor CreateFontW GetStockObject

Name

.text

Size

556KB

Virtual Size

555KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

41391a14aff20dffe3d77cafbb1de35f19da24aa9803e0d097be531729380339

shell32

comctl32

iphlpapi

shlwapi

kernel32

user32

gdi32

generic