5fbfe6972c15bf07ce44d5ac89bc0910323f9591bd1b04550c5b23716ee7ec43

Sharing

Copy URL Twitter E-mail

General

Target
5fbfe6972c15bf07ce44d5ac89bc0910323f9591bd1b04550c5b23716ee7ec43
Size 1.1MB
Sample260730-pw91csyalb
SHA256 5fbfe6972c15bf07ce44d5ac89bc0910323f9591bd1b04550c5b23716ee7ec43
MD5 800defe14fdba274d93c8b6f29b4f64c
SHA1 0b2ed7bf6fe7c6020b210f3625ae7244f6c7ea76
SHA512 19480399dce7cec0c179106ca061dd41e870b2ef6e31b3e8f1f77c867dc4a310c1664edf3a64701e508bf160f9e538b26a6e60666602bc39096c84a2099c679c
SSDEEP 12288:xBim9Tnts08FbKuPcA8NAc1l/XkGaZKoRQIpRX2/0Ak2ng/Zi66wNdufAdN:z/nts0Q9K/0ooRQIxAk2wi0N/
TLSH
T16235CF86869A9BDCC7F99378D0BC0A753C6C7CEF8434E5CC979442890E1E609CDA16F6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fbfe6972c15bf07ce44d5ac89bc0910323f9591bd1b04550c5b23716ee7ec43

File Explorer

5fbfe6972c15bf07ce44d5ac89bc0910323f9591bd1b04550c5b23716ee7ec43

.dll 1.1MB

5fbfe6972c15bf07ce44d5ac89bc0910323f9591bd1b04550c5b23716ee7ec43

IMPHASH e8eb55b0c30a51d6debf49c2415612ee
SHA256 5fbfe6972c15bf07ce44d5ac89bc0910323f9591bd1b04550c5b23716ee7ec43
MD5 800defe14fdba274d93c8b6f29b4f64c
SHA1 0b2ed7bf6fe7c6020b210f3625ae7244f6c7ea76
SHA512 19480399dce7cec0c179106ca061dd41e870b2ef6e31b3e8f1f77c867dc4a310c1664edf3a64701e508bf160f9e538b26a6e60666602bc39096c84a2099c679c
SSDEEP 12288:xBim9Tnts08FbKuPcA8NAc1l/XkGaZKoRQIpRX2/0Ak2ng/Zi66wNdufAdN:z/nts0Q9K/0ooRQIxAk2wi0N/
TLSH
T16235CF86869A9BDCC7F99378D0BC0A753C6C7CEF8434E5CC979442890E1E609CDA16F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

TTPnpins.pdb

BeginBufferedAnimation BeginBufferedPaint BeginPanningFeedback BufferedPaintClear BufferedPaintInit BufferedPaintRenderAnimation BufferedPaintSetAlpha BufferedPaintStopAllAnimations BufferedPaintUnInit CloseThemeData DllCanUnloadNow DllGetActivationFactory DllGetClassObject DrawThemeBackground DrawThemeBackgroundEx DrawThemeEdge DrawThemeIcon DrawThemeParentBackground DrawThemeParentBackgroundEx DrawThemeText DrawThemeTextEx EnableThemeDialogTexture EnableTheming EndBufferedAnimation EndBufferedPaint EndPanningFeedback GetBufferedPaintBits GetBufferedPaintDC GetBufferedPaintTargetDC GetBufferedPaintTargetRect GetColorFromPreference GetCurrentThemeName GetImmersiveColorFromColorSetEx GetImmersiveUserColorSetPreference GetThemeAnimationProperty GetThemeAnimationTransform GetThemeAppProperties GetThemeBackgroundContentRect GetThemeBackgroundExtent GetThemeBackgroundRegion GetThemeBitmap GetThemeBool GetThemeColor GetThemeDocumentationProperty GetThemeEnumValue GetThemeFilename GetThemeFont GetThemeInt GetThemeIntList GetThemeMargins GetThemeMetric GetThemePartSize GetThemePosition GetThemePropertyOrigin GetThemeRect GetThemeStream GetThemeString GetThemeSysBool GetThemeSysColor GetThemeSysColorBrush GetThemeSysFont GetThemeSysInt GetThemeSysSize GetThemeSysString GetThemeTextExtent GetThemeTextMetrics GetThemeTimingFunction GetThemeTransitionDuration GetUserColorPreference GetWindowTheme HitTestThemeBackground IsAppThemed IsCompositionActive IsThemeActive IsThemeBackgroundPartiallyTransparent IsThemeDialogTextureEnabled IsThemePartDefined OpenThemeData OpenThemeDataEx OpenThemeDataForDpi SetThemeAppProperties SetWindowTheme SetWindowThemeAttribute ThemeInitApiHook UpdatePanningFeedback

Name

.text

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

524KB

Virtual Size

521KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

108KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

802B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

346B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

346B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

249B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=52, id=225, productName=VS2013 UPD2 build 30501, version=30501,

count=308, id=122, productName=VS2005 build 50727, version=50727,

count=395, id=1, productName=Unmarked objects,

count=67, id=202, productName=VS2012 UPD1 build 51106, version=51106,

count=479, id=149, productName=VS2008 build 21022, version=21022,

count=192, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=405, id=259, productName=VS2015 [14.0] build 23026, version=23026,

count=147, id=220, productName=VS2013 build 21005, version=21005,

count=145, id=258, productName=VS2015 UPD1 build 23506, version=23506,

count=248, id=204, productName=VS2012 UPD3 build 60610, version=60610,

count=409, id=157, productName=VS2010 build 30319, version=30319,

count=250, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=155, id=157, productName=VS2010 build 30319, version=30319,

count=314, id=222, productName=VS2013 UPD4 build 31101, version=31101,

count=197, id=225, productName=VS2013 build 21005, version=21005,

count=19, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

5fbfe6972c15bf07ce44d5ac89bc0910323f9591bd1b04550c5b23716ee7ec43

advapi32

comdlg32

setupapi

generic