ff7d6b63b6cf320fded10a232c834bf1b248ce44d2046cc2ba5ddc0e49b639a4

Sharing

Copy URL Twitter E-mail

General

Target
ff7d6b63b6cf320fded10a232c834bf1b248ce44d2046cc2ba5ddc0e49b639a4
Size 8.0MB
Sample260730-ll4ttaverc
SHA256 ff7d6b63b6cf320fded10a232c834bf1b248ce44d2046cc2ba5ddc0e49b639a4
MD5 08239a702e3a3a75feaa858c8a48c998
SHA1 7f51ea99fb62872e8532825915dedf50d8f0385c
SHA512 8996c412906baab5a92634dcbf51a58920b56c2da72b40314fac1301892e1af95c5e6c3277cdc48f0596b391b2337a06320a7ade1a8456c2222ce0e17cd39f7c
SSDEEP 196608:dreMw6zSLU9D5x6efHYwqQ7gzBL94gATmPTfWCf/oxg6M:lBw6zSq3VF7IL9zATmPTeCoxgp
TLSH
T143863342B800E186FB264732DD5FEA62A3166B2D2A50C24E75405E7BB2FB3075D1F727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff7d6b63b6cf320fded10a232c834bf1b248ce44d2046cc2ba5ddc0e49b639a4

File Explorer

ff7d6b63b6cf320fded10a232c834bf1b248ce44d2046cc2ba5ddc0e49b639a4

.exe 8.0MB

ff7d6b63b6cf320fded10a232c834bf1b248ce44d2046cc2ba5ddc0e49b639a4

IMPHASH 3dd17653169450c8408af6adb19cd3e5
SHA256 ff7d6b63b6cf320fded10a232c834bf1b248ce44d2046cc2ba5ddc0e49b639a4
MD5 08239a702e3a3a75feaa858c8a48c998
SHA1 7f51ea99fb62872e8532825915dedf50d8f0385c
SHA512 8996c412906baab5a92634dcbf51a58920b56c2da72b40314fac1301892e1af95c5e6c3277cdc48f0596b391b2337a06320a7ade1a8456c2222ce0e17cd39f7c
SSDEEP 196608:dreMw6zSLU9D5x6efHYwqQ7gzBL94gATmPTfWCf/oxg6M:lBw6zSq3VF7IL9zATmPTeCoxgp
TLSH
T143863342B800E186FB264732DD5FEA62A3166B2D2A50C24E75405E7BB2FB3075D1F727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15555

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

PeekMessageW DispatchMessageW wsprintfA wvsprintfW SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled GetAsyncKeyState EmptyClipboard SetClipboardData CloseClipboard OpenClipboard IsDlgButtonChecked CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos SetDlgItemTextW GetClassInfoW RegisterClassW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW MessageBoxIndirectW CharPrevW CharNextA CreateWindowExW GetDlgItemTextW LoadCursorW

gdi32

GetDeviceCaps SetBkColor CreateBrushIndirect SetTextColor SetBkMode SelectObject DeleteObject CreateFontIndirectW

kernel32

WriteFile WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode GetTempPathW CreateProcessW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep GetLastError CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW GetModuleHandleA MoveFileExW GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetEnvironmentVariableW

Sharing

General

Malware Config

Signatures

File Explorer

ff7d6b63b6cf320fded10a232c834bf1b248ce44d2046cc2ba5ddc0e49b639a4

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic