59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd

Sharing

Copy URL Twitter E-mail

General

Target
59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd
Size 438KB
Sample260730-yf7dzaef86
SHA256 59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd
MD5 91f283ac0e916380060ec2deeea541d2
SHA1 811c5a7608c2127c3e08a6602d40fd7515e74e26
SHA512 d1b118ec8b6b31d7e170107608a5ec64768428859a10c89a20d4a2e6e43856c4f54862c15f4da69ef2a8ac5e7777ec7ad6af6ed2eabe3dde1c4a6e6fddcdde19
SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltQ:2pkbi5qjhZ3CmW9lsq+eYC
TLSH
T171945C1177C2C4A7E9691570CC9AC1F40558FC6CDB6156AFB1823F2E7AF23D1192BA0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd

File Explorer

59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd

.exe 438KB

59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd

IMPHASH 3cbd26f7129b578c97ad3b7168086223
SHA256 59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd
MD5 91f283ac0e916380060ec2deeea541d2
SHA1 811c5a7608c2127c3e08a6602d40fd7515e74e26
SHA512 d1b118ec8b6b31d7e170107608a5ec64768428859a10c89a20d4a2e6e43856c4f54862c15f4da69ef2a8ac5e7777ec7ad6af6ed2eabe3dde1c4a6e6fddcdde19
SSDEEP 6144:dN2pkbnH7MuaW2q2qaghYenWS1uH9vd/he9Bm9lsqPm5C/vOTKsMiCKEU5uK1ltQ:2pkbi5qjhZ3CmW9lsq+eYC
TLSH
T171945C1177C2C4A7E9691570CC9AC1F40558FC6CDB6156AFB1823F2E7AF23D1192BA0E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27677

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection FindNextFileW GetCurrentProcess WriteFile TerminateProcess RemoveDirectoryW GetModuleFileNameW SetThreadUILanguage InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetTempPathW FindClose CreateFileW GetFileAttributesW SetFileAttributesW MultiByteToWideChar GetLastError DeleteFileW CloseHandle CreateThread GetProcAddress SetFilePointerEx GetFileSize DeleteCriticalSection GetModuleHandleW WideCharToMultiByte DecodePointer HeapReAlloc HeapSize FlushFileBuffers GetConsoleOutputCP GetStringTypeW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WriteConsoleW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetThreadLocale FindFirstFileW ReadFile SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetFileType ExitProcess GetModuleHandleExW GetStdHandle GetConsoleMode HeapAlloc HeapFree LCMapStringW

user32

GetMessageW DefWindowProcW DestroyWindow MessageBoxExW SendMessageW GetSystemMetrics RegisterClassExW ShowWindow DispatchMessageW TranslateMessage LoadIconW PostQuitMessage EnableWindow CreateWindowExW

gdi32

CreateSolidBrush CreateFontW

advapi32

RegDeleteKeyW

shell32

ShellExecuteW SHGetSpecialFolderPathW

Sharing

General

Malware Config

Signatures

File Explorer

59a477c62caac6faa1ffae6d6b16f1e9f53651b4d478896100977554002219fd

kernel32

user32

gdi32

advapi32

shell32

generic